Privacy
What is collected, and what is not.
This covers three things: the website you are reading, the client portal at reporting.origamidigital.co, and the reporting app that wraps the portal on a phone. One person runs all three, and this is written by him. Last updated 3 November 2026.
This website
This website uses Google Analytics to measure website activity. Google processes analytics data through its service. The website also uses locally hosted fonts.
Google Analytics may use cookies or similar identifiers. Browser privacy controls can limit these. The website may also keep interface preferences in your browser storage.
The contact form asks for your name, work email, company and a message, and, if you choose to give them, your website, the markets you serve, the number of doors you manage and how you found Origami Digital. Sending it emails those details to me and keeps a copy in the site’s admin area, which is not public, so an inquiry is not lost if the email fails. The server that runs the site, like every web server, keeps access logs that include your IP address and the pages requested, and rotates them.
The client portal
The portal is for clients only. To use it you have an account I created for you: your name, your email address, and a password that is stored hashed, never in plain text. If you turn on two-step sign-in, a secret for your authenticator app is stored with the account.
Signing in sets one session cookie, which is marked secure and inaccessible to scripts, and expires when the browser closes or after two hours without activity. If you tick “remember me”, a second cookie keeps you signed in on that device until you sign out.
The portal keeps an audit record: sign-ins and failed attempts, the IP address they came from, and which documents an account opened and when. That record exists so a client can be told, truthfully, who saw what. It is not shared and it is not used for anything else.
The portal sends email when something needs you: a report published, a draft waiting for your word, a reply to a message. Each email goes to the address on your account, from this domain.
Everything in the portal is your own engagement’s data: the readings from your Google accounts and from Ahrefs, the work log, the reports, the drafts and the messages. Only accounts I have linked to that engagement can see it, and I can.
The portal is for clients only.
The reporting app
The Android app is the portal in a wrapper. It opens reporting.origamidigital.co full screen and nothing else. It collects nothing on its own: no location, no contacts, no device identifiers, no analytics. What it holds is your sign-in, the same way a browser would. Uninstalling it removes that.
Who else can see any of it
Hosting and email providers process the information needed to run the website and deliver messages. Google also processes website analytics data. Client portal access is limited to the accounts assigned to the engagement and the site operator.
Nothing is sold, rented, or handed to advertisers. Nothing is used to train anything.
Hosting and email providers process the information needed to run the website and deliver messages.
Your side of it
You can ask for everything held about you, ask for it to be corrected, or ask for your account and its records to be deleted. Write to danish@origamidigital.co and it reaches me, not a desk. Deleting a client account removes the account, its cookies and its audit records; the engagement’s reports stay with the engagement, because they are the client’s.
If this page changes, the date at the top changes with it.
