Privacy
What is collected, and what is not.
This covers three things: the website you are reading, the client portal at reporting.origamidigital.co, and the reporting app that wraps the portal on a phone. One person runs all three, and this is written by him. Last updated 7 September 2026.
This website
The site does not run analytics, advertising or tracking of any kind. No Google Analytics, no pixels, no third-party scripts. The fonts are served from this domain, not from Google.
It sets no cookies. It keeps one flag in your browser’s session storage so the opening animation plays once per visit; that flag never leaves your browser and is gone when the tab closes.
The contact form asks for your name, email address, website address, town and a message. Sending it emails those details to me. They are not stored on the site. The server that runs the site, like every web server, keeps access logs that include your IP address and the pages requested, and rotates them.
The client portal
The portal is for clients only. To use it you have an account I created for you: your name, your email address, and a password that is stored hashed, never in plain text. If you turn on two-step sign-in, a secret for your authenticator app is stored with the account.
Signing in sets one session cookie, which is marked secure and inaccessible to scripts, and expires when the browser closes or after two hours without activity. If you tick “remember me”, a second cookie keeps you signed in on that device until you sign out.
The portal keeps an audit record: sign-ins and failed attempts, the IP address they came from, and which documents an account opened and when. That record exists so a client can be told, truthfully, who saw what. It is not shared and it is not used for anything else.
The portal sends email when something needs you: a report published, a draft waiting for your word, a reply to a message. Each email goes to the address on your account, from this domain.
Everything in the portal is your own engagement’s data: the readings from your Google accounts and from Ahrefs, the work log, the reports, the drafts and the messages. Only accounts I have linked to that engagement can see it, and I can.
The reporting app
The Android app is the portal in a wrapper. It opens reporting.origamidigital.co full screen and nothing else. It collects nothing on its own: no location, no contacts, no device identifiers, no analytics. What it holds is your sign-in, the same way a browser would. Uninstalling it removes that.
Who else can see any of it
Nobody, with two exceptions that every website has. The hosting company whose server runs the site and the portal (Hostinger) has physical access to that server. Email passes through the mail servers involved in delivering it.
Nothing is sold, rented, or handed to advertisers. Nothing is used to train anything.
Your side of it
You can ask for everything held about you, ask for it to be corrected, or ask for your account and its records to be deleted. Write to danish@origamidigital.co and it reaches me, not a desk. Deleting a client account removes the account, its cookies and its audit records; the engagement’s reports stay with the engagement, because they are the client’s.
If this page changes, the date at the top changes with it.