Privacy.

What this covers

This notice describes how Hare Quest LLC handles information collected through hare.quest and its subdomains. That is the public pages of this site and the client support request forms hosted on subdomains, of which aca.hare.quest is the first.

It does not cover work performed for clients under a services agreement. Information inside a client's own systems is handled under that client's agreement with Hare Quest, and the client, not Hare Quest, decides how their data is used, retained, and disclosed. Where the two meet, which is the support request form, this notice says so below.

The public pages

The pages on hare.quest itself are static. They collect nothing. There is no form, no account, and no request made to any other company when a page loads.

• No cookies
  No cookies are set, on any page of any subdomain.
• No analytics
  No Google Analytics, no tag manager, and no privacy-preserving alternative either. Visits are not counted or profiled.
• No third-party content
  No fonts, maps, videos, widgets, or scripts loaded from another company. Typefaces are served from this site, so opening a page does not tell anyone else you were here.
• No advertising or sale of data
  Hare Quest does not sell, rent, or share personal information, and does not build or buy marketing lists.

The support request form

Client staff submit IT support requests through a form on a subdomain of this site. This is the one part of the site that deliberately collects information, because a support request that carries no contact details cannot be answered.

What the form asks for

• Name
  So the reply is addressed to a person.
• School email address
  Where the answer is sent. The form accepts addresses at the school's own domains only.
• Room number or location
  Where the problem is.
• Urgency
  One of four levels, chosen by the person submitting.
• Description of the problem
  Free text, written by the person submitting. Whatever they choose to put in it.

The form does not accept file uploads, so no screenshots, documents, or attachments pass through it. It has no cookies and stores nothing in the browser.

What happens to a submission

On submit, the request is written to the public web server, sent by email to Hare Quest, and acknowledged by email to the address given. Within about a minute it is copied to Hare Quest's private internal systems, which are not reachable from the internet, and deleted from the public server. The internal copy is the ticket record.

Alongside the request, the web server records the IP address the submission came from. That address is used to enforce rate limits on the form and is written to the server log described below. It is not stored on the ticket itself; the ticket carries a one-way hash instead, which is enough to notice a repeated abusive sender and not enough to reconstruct where anyone connected from.

How long it is kept

• On the public server
  The full request is held only until the internal system collects it, normally under a minute, and no longer than 30 days if that collection is interrupted. It is then deleted.
• Public server record of the fact
  A short line noting that a request was accepted, with the ticket number, time, urgency, room, and email address, is kept for 90 days so a request that appears to have gone missing can be traced. It does not include the description of the problem.
• On Hare Quest's internal systems
  The ticket record is kept for the life of the engagement as the client's record of support provided. Under the services agreement the contents belong to the client, not to Hare Quest.
• Email
  The request email and the acknowledgement are kept as business correspondence, as described below.

At the end of an engagement the ticket record is returned or made accessible to the client under the terms of their agreement, and Hare Quest's operational copy is deleted after the transition period the agreement sets.

Server logs

The server hosting this site records a line for each request: the IP address, the date and time, the page or endpoint requested, the referring page if the browser sends one, and the browser's user-agent string. These logs are used to keep the site running, to enforce the form's rate limits, and to block abusive traffic. They are not combined with anything else, are not used to build a profile, and are deleted within 30 days.

Browser storage

On hare.quest itself, switching between light and dark saves that choice in your browser's local storage under the name hare-theme. It is a single word, it stays on your device, it is never transmitted anywhere, and clearing your browser storage removes it. The support request subdomains store nothing at all.

If you email

Email sent to Hare Quest is kept as business correspondence, along with whatever you chose to put in it. It is used to answer you and to keep a record of the engagement. It is not added to a mailing list, and Hare Quest does not send marketing email.

Children

This site is directed at organizations rather than individuals, and neither the public pages nor the support form are intended for use by children. Hare Quest does not knowingly collect personal information from children through this site. A support request written by a member of staff may mention a student, for example when the problem is that student's account; that information is part of the client's record and is handled under the client's agreement, not gathered by Hare Quest for its own purposes.

Requests about your information

To ask what is held about you, to correct it, or to have correspondence removed, email the address below. Requests about a support ticket submitted through a client's subdomain are handled with that client, since the ticket record is theirs.

Changes

If this notice changes, the date below changes with it. There is no archive; the current version is the one that applies.