Long Law Privacy Policy

Effective date: September 17, 2026

This policy replaces the Privacy Policy dated August 12, 2026.

Who we are, and what this policy covers

Long Law, P.C. ("Long Law," "we," "us," "our") runs one website at go.long.law with two parts, and this policy covers both.

• The GoLong store. It is open to anyone. There you can read about our flat fee legal services, download our founder guides, join our mailing list, ask our store assistant a question, and buy, sign for, and pay for a legal service.
• The Long Law Client Portal. Clients sign in to see their matters, documents, and invoices. Access is by invitation. Addresses at portal.long.law still work and forward to go.long.law.

Long Law decides what this site collects and what happens to it.

Where a practice applies to only one part of the site, we say so. Where this policy says "our sites" or "either site," it means both parts.

You do not need to be a client for this policy to apply to you. Much of what follows describes information we collect from members of the public who are not clients and may never become clients.

What this policy does not cover

This policy does not describe how the firm handles the contents of a client matter. That is governed by your engagement letter, by our professional obligations under the rules of conduct in New York, New Jersey, and California, where our attorneys are admitted, and by law.

Where this policy and a signed engagement letter differ about information in your matter, the engagement letter and our professional obligations control. For the terms on which you use a site, two other documents control. On the store, that is the GoLong Terms of Use, at go.long.law/terms. In the portal, it is the Client Portal Terms of Use, at go.long.law/portal-terms.

Who you are: visitor, buyer, or client

What we hold about you depends on how you use our sites. Three descriptions cover almost everyone, and this policy says which one it is talking about as it goes.

You may be a visitor. You are reading the store, perhaps downloading a guide or typing a question into the store assistant. We hold very little about you, and often nothing that identifies you.

You may be a buyer. You have started or finished a purchase. We hold your contact details, your answers to the questions the product asked, your signed engagement documents, and a record of what you paid.

You may be a client. We have an open matter for you. Most of what we hold about you is your matter file, and your engagement letter and our professional obligations govern it, not the marketing parts of this policy.

When you become our client

You become our client when a Long Law attorney countersigns your engagement letter and we open your matter. Nothing before that step creates an attorney-client relationship.

So reading either site, downloading a guide, using either assistant, joining our mailing list, filling in a checkout form, signing an engagement letter, and paying us do not by themselves make you our client.

There is one exception. A paid consultation is a limited engagement for that conversation only, and the attorney is giving you advice within it. A free consultation is not an engagement, and nothing said in it is legal advice.

What we collect from visitors to the store

You can browse the store without telling us anything. We do not require an account to read the site.

Mailing list

You join the mailing list by giving us your email address and ticking a consent box. The box is never ticked for you. If you sign up, we record:

• your email address, and your name if you choose to give it;
• the wording of the consent sentence we showed you;
• the IP address our server saw when you submitted the form;
• when you signed up;
• a random identifier that we put in the links of the email we send you.

We record the consent wording rather than a bare yes, and we keep every version: if you sign up more than once, each signup adds its own record with the sentence you saw that time, and nothing overwrites the earlier ones.

Guide downloads

Our founder guides are served from our own site. When anyone opens or downloads one, we record the file, the date and time, the IP address the request came from, the browser that asked for it, and the page the request came from.

If you arrived by clicking a link in one of our email messages, that link carries the random identifier described above, and we record the download against your subscription rather than anonymously. We also record downloads by people who are not subscribers, with no name attached.

Two things follow from how this works, and you should know both. The identifier travels inside the link, so if you forward one of our messages, a download by the person you sent it to is recorded against your subscription and not theirs. And our email provider can see that identifier, because it rewrites the links in our messages in order to count clicks.

The guide file itself is not locked to you. The identifier tells us who a download belongs to. It does not stop anyone else from opening the file.

The store assistant

The store shows a chat assistant. It is software, not a lawyer, and it writes its answers using an artificial intelligence service operated by Anthropic. It tells you in its first message that it is automated, and you see a notice about that before your first exchange with it.

We store the full text of what you type and what it replies, along with a random session identifier your browser holds. We store these conversations whether or not you are a client and whether or not you have told us who you are, and firm staff can read them in full. If you give the assistant your email address, we attach it to the conversation and create a task in our intake queue with your name, the address, and your first message, so that a person follows up.

The assistant appears on our checkout pages as well as our information pages. Please do not type the confidential facts of your legal situation into it. If you want to tell us your situation, book a consultation or email golong@long.law.

Fonts

Our pages, on the store and in the portal alike, load a typeface from Google's font service. That request tells Google your IP address and the basic details your browser sends with any request. We send Google nothing else.

Activity logs

Our servers keep a log of significant events on both sites, such as a sign-in, a checkout step, a payment, or a blocked request. A log entry can hold the date and time, what happened, the page requested, the IP address the request came from, and, where the event involved an identified person, that person's email address.

Asking about a consultation

If you ask about or book a consultation, we collect your name and email address, and, if you give them, a phone number, a company name, and what you want to talk about. We keep that, email it to our staff, and create a task in our intake queue at Asana so a person follows up. If you book a time, the booking goes through our scheduling providers, named in the companies table below, and they receive your name, your email address, and the topic you typed.

What we collect when you buy a service

Checkout

If you start checkout we collect the email address of the person buying and that person's name. If you give them, we also collect a phone number, the name of the company or person to be represented, and a mailing address.

Products ask their own questions, and your answers can be substantive. Depending on what you buy, you might give us:

• the name and purpose of a company you want formed;
• a mark you want registered, and the goods or services it covers;
• a description of an invention;
• the parties to a non-disclosure agreement, and what it is about.

We store your answers as you write them. Some products also ask you to upload a file, such as the specimen for a trademark filing. We store the file, and we attach it to your contact record in Clio, our case management system, so it is with your papers when an attorney picks the work up.

Your cart

Your cart lives in your browser, and, once you have signed in or confirmed your email address, on our servers as well, attached to that address. We keep the server copy so your cart survives a change of device, and so we can see that a cart was filled and then abandoned. We may email you once about a cart you left behind. Ask us and we will delete it; finishing checkout deletes it automatically.

The record we make before you sign anything

When you finish the contact step of checkout, we create a record of your inquiry in our intake system, so that a person at the firm follows up. That happens before you have signed or paid anything. The record includes your name, email address, phone number, company name, what is in your cart, and the answers you gave to the product questions.

Confirming your email address

To confirm the address belongs to you, we email you a one-time link. We record the address, the IP address of the request, the link's own token, and when the link was created and used.

Signing and paying

Your engagement letter and Statement of Work are signed in your browser through DocuSign. To prepare them we send DocuSign your name, your email address, the name of the company or person being represented, your mailing address, the services and the fee figures, and the documents themselves. We keep the signed document and file it with your matter.

You pay on a payment page operated by Clio. Your card or bank details go to Clio on Clio's own page. We never see them and we do not store them. What we keep is the amount, what it was for, when it was paid, and the reference numbers. Your payment is held in the firm's client trust account until we earn it.

Before we agree to represent you we run a conflict check, which means we look at the names involved against our existing and former clients.

Phone numbers

If you give us a phone number at checkout we use it to reach you about your order and your matter. We do not send marketing text messages, and we do not use your number for automated calling.

What we collect in the client portal

Signing in

The portal has no passwords. To sign in you ask us to email you a one-time link. We record:

• your email address;
• the IP address and browser of the device you sign in from;
• the date and time of each attempt, whether it worked or not;
• the link's token, and when we created it and when you used it. We delete the token record within about an hour of its use or expiry; what we keep longer is the sign-in log itself;
• the session we issue you afterwards;
• whether you asked us to remember your device.

We also record that you accepted the Client Portal Terms of Use, and which version you accepted. The section on changes to this policy explains what that record holds.

Using the portal

As you use the portal we record:

• requests for sign-in links, and what happened to them;
• documents you upload;
• payment links we generate for invoices in your matter;
• appointments and sessions you book, any deposit, credit, or session time applied to them, how long a session actually ran, and any note our staff record when they reconcile the time;
• your conversations with the client assistant;
• failed access attempts, including requests our limits stopped and attempts to open pages you are not authorized to view.

If your matter includes an ongoing filing obligation, such as an annual state report, we hold the details needed to remind you. Those are the entity name, its state and type, the filing type, when it was last filed, when it is next due, and which reminders we have sent.

Your matter information

The portal shows information about your legal matters that is held in Clio, our case management system. Clio is the system of record for your matter.

The client assistant in the portal answers questions about your matter. To do that it reads information from your matter, including a list of your matters and the text of documents in them, and sends what it reads to Anthropic. The section on companies that handle information for us sets out what goes there.

You can download the documents in your matter from the portal at any time. If you would rather we sent them to you another way, ask and we will arrange it.

Email we send you

We send you email about your order and your matter: sign-in links, notices that a document is ready, payment receipts, appointment confirmations, and similar messages. We record that the message was sent and whether delivery succeeded. Most of these go through our email provider, which also records whether a message was opened and which links in it were clicked. The section on marketing email, tracking, and how to stop it explains that.

When firm staff view the portal as you

Firm staff can open the portal in your view, in order to help you or to check that something is displaying correctly. While they do, they can see your matters, documents, and invoices as you would. We log every time it happens and who did it.

What we do not collect

We do not collect biometric information or precise location information. We do not ask for Social Security numbers, though a document you upload may contain one. We do not collect card or bank account numbers, because those are entered on Clio's payment page and never reach us.

Cookies and what your browser stores

The portal sets a session cookie so that you stay signed in while you use it. The cookie carries no information about your matter. A session ends after a period of inactivity, and you sign in again with a fresh link.

If you ask us to remember your device, we set a cookie that lasts longer, so that you are not asked for a new link every time. Do not ask us to remember a shared or public computer.

Both parts of the site also keep some information in your own browser. On the store, that is the contents of your shopping cart, a note that you have already seen or dismissed our mailing list pop-up, a note that you have seen the assistant's automation notice, and the contact details you typed while you were completing checkout. The contact details are removed when you finish checkout, or on your next visit once thirty minutes have passed; until one of those happens they sit in your browser, so think twice before starting checkout on a shared computer. In the portal, your browser holds a token that reconnects you to your assistant conversation and a note that you have seen the assistant notice. None of this is a cookie, so clearing cookies alone may not remove it; clearing site data does. Your cart is also kept on our servers once you have identified yourself, as described in the checkout section.

We do not use advertising cookies, and there is no advertising network and no third party tracking pixel on either site.

Two outside services do see something simply because a page loaded. Google's font service serves the typeface on our pages, and hCaptcha runs the bot check on our sign-in and consultation pages. Each learns your IP address. Neither is an advertising service and neither is there to track you.

How we use information

We use what we collect to:

• answer you, follow up on an inquiry, and tell you about an order;
• run the sites and their features, including showing you your matters, documents, and invoices;
• confirm who you are and keep your account secure;
• prepare, send, and file your engagement documents, and take and record payment;
• carry out the legal work you have engaged us for;
• send the marketing email you asked for, and measure whether people open and read it;
• understand which of our guides people find useful;
• learn how our products and services are used, using usage data from which we have first removed what identifies you;
• detect and respond to security incidents, fraud, and unauthorized access;
• meet our professional obligations, including the duty to keep client information safe;
• comply with the law and respond to lawful requests from courts, regulators, and law enforcement.

Usage data, anonymized

We take data about how people use our sites and our services, remove what identifies the people in it, and use what remains to understand how our products and services are used and to build better ones. Once it is anonymized this way it no longer describes you, and we may keep and use it without time limit. The contents of client matters and documents are not used for this. Your permission for this is part of the GoLong Terms of Use and the Client Portal Terms of Use.

What we do not do with it

We do not sell your personal information, and we do not give it to anyone for their own advertising or marketing. There is no advertising network on either site. We do not build advertising profiles and we do not target ads at you anywhere.

Buying from us puts you on our email provider's contact list

When you buy from us or book an appointment, we add your name and email address to the contact list we keep at Mailchimp, our email provider. We tag that entry with the stage you have reached with the firm. A tag can record that an engagement letter was signed, that an order was paid, that a consultation was booked, or that an appointment deposit was paid.

We do this whether or not you ticked the marketing box, because we use the same contact list to send order and matter email. If you did not tick the box, your entry is marked as not consenting to marketing, and we do not send you marketing campaigns. The entry and its tags still exist, and Mailchimp holds them.

If you do not want your entry on that list, tell us and we will remove it, or use the unsubscribe link in any marketing email. Once you have opted out, placing another order will not put you back on: our systems check for an opt-out before adding anyone, so the decision sticks without you having to police it.

We would rather tell you this than describe our marketing records as untouched by your purchase.

Marketing email, tracking, and how to stop it

Measurement

The email we send is sent with open and click tracking switched on. Our email provider records whether a message was opened and which links in it were clicked, and reports that to us. That is how the download attribution described above works, and it is how we decide what to write next.

Because click tracking is on, our email provider rewrites the links in our messages. That includes one-time links, such as the link that confirms your email address at checkout and the link that opens a guide, so our email provider sees those links.

How to stop marketing email

Write to golong@long.law, or reply to any message we send and say stop. That is the way that always works. A person at the firm acts on it, and we do not ask you for a reason.

Every marketing email we send also carries an unsubscribe link. Clicking it takes you to a page on our own site, asks you to confirm, and then takes you off the list straight away. We ask you to confirm because email programs sometimes follow links on their own, and we would rather not remove you because software clicked something on your behalf.

We record the opt-out on our side and tell our email provider as well, so both systems agree and a later form submission or list import cannot quietly put you back on. If you would rather we deleted your address outright instead of keeping a record that you opted out, tell us. Understand that we then have no way to recognise it if it is submitted again.

Stopping marketing email does not stop email about an order you placed or a matter we are handling for you. Those continue for as long as we are working together, because we need them to do the work.

Companies that handle information for us

We use outside services to run our sites and our practice. Each one is chosen for the job it does, and each receives only what that job needs.

Service	What it does for us	What it receives
Clio	Case management, the system of record for contacts, matters, documents, and billing, and the payment page you pay us on. Intake inquiries go to our own database and to Asana, below, not to Clio	Your name, email address, phone number, and mailing address; matter and document activity; a copy of your signed engagement letter; the amount and purpose of a payment, and the card or bank details you enter on Clio's own page, which never reach us
DocuSign	Signature on engagement letters and Statements of Work	Your name, email address, the name of the company or person being represented, your mailing address, the services and fee figures, and the documents themselves
Mailchimp Marketing	Holds our contact list and sends our marketing email	Your email address, your first and last name, and tags recording where you signed up and what stage you have reached with us
Mailchimp Transactional	Sends most of our automated email, including checkout confirmation links, order and payment email, and guide delivery	Your email address and name, and the contents of the message, including its links. Open and click tracking is on, so it records whether you opened a message and which links you clicked
Microsoft	Delivers some of our email	Your email address and the contents of the message
Anthropic	The artificial intelligence service behind our assistants	See what we send Anthropic, below
Asana	Our intake queue, so that a person follows up on your inquiry	Your name, email address, phone number, company name, what was in your cart, and your answers to the product questions
Render	Hosts our applications and our databases, in the United States	All the data our sites need in order to run
hCaptcha	Checks that a sign-in or consultation request comes from a person rather than a bot	The challenge response your browser produces, and your IP address
ip-api.com	Looks up the country an IP address belongs to, which we use for the sign-in geographic restriction and for staff alerts	The IP address you are signing in from
Zoom	Schedules consultations and portal sessions, and hosts the meetings	Your name, your email address, the meeting time, and the topic or notes you typed when booking
Calendly	Schedules some consultations and appointments	Your name, your email address, the meeting time and details, and your IP address when its booking page loads
Google Fonts	Serves the typeface on our pages	Your IP address and the basic details your browser sends with any request

We also use a small number of ordinary business tools to run the firm, and some of them receive limited personal information in order to do their job. If you want the current list, email golong@long.law and we will send it to you.

Each of these services has its own privacy terms governing what it does with what we send it. We choose services whose practices we consider consistent with our professional obligations. If you have a concern about any of them, tell us and we will discuss alternatives for your matter.

We do not give your information to anyone else. The exceptions are where we must comply with the law, where we must respond to valid legal process, and where we act to protect against fraud, abuse, or a threat to someone's safety.

What we send Anthropic

• Store assistant: what you type, the recent turns of that conversation, our service catalogue, and reference material our staff have added.
• Client assistant in the portal: your question, the recent turns of that conversation, your name (or your email address if we have no name for you), a list of your matters and their descriptions, text from documents in your matter, and reference material our staff have added.
• Document descriptions in the portal: when you ask for a plain-English description of a document on the documents page, up to the first few thousand characters of that document's text go to Anthropic, and we store the description it returns so we do not have to send the text twice.
• Staff assistant: our staff have their own assistant. When they use it on your matter, what they put to it goes to Anthropic in the same way. Documents our staff upload as reference material for the assistants are also sent to Anthropic once, to be condensed into the notes the assistants read.

We store the transcripts of these conversations, and firm staff can read them.

How long we keep information

Two periods

We work to two periods. A record that is not part of a client file we purge after four years. A record that is part of a client file we keep for seven years after that file closes.

Deleting a record from our live systems does not remove it at once from our hosting provider's backups. Those copies age out on the provider's own schedule.

What	How long we keep it
Your mailing list entry, and our records of which guides you downloaded	Four years. If you unsubscribe, we keep your email address on a suppression list for as long as we send any marketing email at all, because forgetting that you left is how you would start hearing from us again
The record of the consent you gave when you joined the list	Kept, including after you ask us to delete your information. See "What we cannot delete, and why" below
Sign-in records, access logs, and site activity logs	Four years
Conversations with our assistants	Four years for a conversation on our public site. A conversation inside the client portal is part of your client record and follows the seven-year period below
Your matter file, your engagement letter, our record of the work and the fees, and our trust account records	Seven years after your file closes, under the firm's own record retention policy. See below

Your matter records

Once you have signed an engagement letter with us, some records become firm records kept under the firm's own retention policy. Those are your engagement letter, your matter file, our record of the work we did and the fees you paid, and our trust account records. The firm holds them for seven years after your file closes. That period is set by the rules of professional conduct and by law rather than by this policy, and if the rules ever require longer for a particular record, the rules win. If you want to know how long the firm will hold your file, ask your attorney and we will tell you.

A request to delete your personal information does not reach those records. The section on copies, corrections, and deletion explains why.

Copies, corrections, and deletion

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to golong@long.law or call (315) 991-8000.

There is no self-service button for this. A person at the firm handles your request by hand. We will confirm who you are before we act. We answer as soon as we can, and if a request will take us a while, we tell you so and tell you when to expect an answer.

What we will delete

Ask us and we will delete:

• your mailing list entry, and your entry on our email provider's contact list;
• our records of which guides you downloaded;
• the conversations with our assistants that we can identify as yours;
• an inquiry that never became a matter, including the copy in our intake queue;
• your cart contents;
• contact details you gave us at a checkout you did not finish.

What we cannot delete, and why

If you signed an engagement letter with us, we are professionally required to keep certain records. Those are the engagement letter, your matter file, our record of the work and the fees, and our trust account records. This is not a preference of ours, and it is not something we can waive at your request. The same rules that protect the confidentiality of your file also require us to keep it.

We also keep our security and access logs for the periods above rather than deleting them on request, because deleting them on request would defeat what they are for.

We keep the record of the consent you gave when you joined our mailing list, even after we delete the mailing list entry itself. That record is how we can show what you agreed to and when, if it is ever questioned, and it contains the email address you gave us. So if you ask us to delete your information and we do, this one record remains. We would rather say that plainly than describe what we do as a deletion it is not. If you tell us you want that record gone too, say so and we will tell you where that leaves us.

And if you unsubscribe, your email address stays on a suppression list. That is not us keeping data you asked us to drop, it is the only way to keep the promise not to mail you.

And we cannot treat your matter file as though it were marketing data. Asking us to delete your marketing record does not delete your file, and it does not end or change our professional duties to you.

Where a record is partly deletable

We delete the part we can. We can take you off our marketing contact list while keeping the engagement letter your matter requires us to hold, and we will.

California residents, and everyone else

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. The section above explains how. We treat those requests the same way for everyone, in California, in New York, in New Jersey, and anywhere else. We offer those choices as a commitment of this firm, whether or not a privacy statute requires them of us.

You will not find a "Do Not Sell or Share My Personal Information" link on our sites, and that is deliberate rather than an oversight. We do not sell personal information, and we do not hand it to anyone for their own advertising. Our sites carry no advertising network and no third party advertising pixel. A link inviting you to opt out of something we do not do would mislead you, so we have not put one there. The section on companies that handle information for us names the services we rely on to run the firm and says what each one receives.

If you think we are not following this policy, tell us at golong@long.law. You can also raise it with your state attorney general's consumer protection office, or with any privacy regulator in your state.

Confidential and privileged information

Communications protected by the attorney-client privilege are governed by the rules of professional responsibility, not by the marketing sections of this policy. We do not share privileged communications with any outside party beyond what is necessary to represent you, and we never share them with anyone for marketing purposes. That is not a promise this policy creates and could amend away; it is a professional obligation we carry in every state where we practice, and it survives this policy.

Marketing information and confidential information are not the same thing

We keep our mailing list separate from our client files, and we do not use anything you told us in confidence in order to market to you. If you are a client, the fact of your matter, what it is about, and anything you have told us about it stay in the firm's case management system. They are handled under our professional duty of confidentiality, not under the marketing parts of this policy.

Our mailing list and our download records hold contact details, and a record of which of our guides you downloaded. They do not hold the facts of anyone's legal matter.

One qualification, stated plainly. As described above, when you buy from us your name and email address go onto our email provider's contact list. The entry carries a tag recording the stage you have reached, and that tag can indicate that you signed an engagement letter with this firm. If you would rather that not happen, tell us and we will take your entry off that list.

The assistants are not a confidential channel

The store assistant and the client assistant are software. We store what is typed into them, and firm staff can read it. Do not put confidential facts into either one, whether or not you are already a client. If you want to tell us something confidential, book a consultation, call (315) 991-8000, or email golong@long.law.

Sharing your portal access can expose privileged material

The material in your portal is confidential and may be protected by attorney-client privilege or as work product. Because the portal signs you in from a link sent to your email address, anyone who can read that email, or who is holding your unlocked device, can reach your matter.

Sharing a sign-in link, forwarding one of our portal messages, or letting someone else use your session can expose privileged material to a person outside the privilege. That can harm your matter. The Client Portal Terms of Use, at go.long.law/portal-terms, explains the risk in more detail.

If someone else needs to see information from your matter, such as a family member, a business partner, or your accountant, do not share your access. Call your attorney first, and we will discuss the options with you.

Tell us at golong@long.law if you think someone else has reached your account.

Children

Our sites are not directed to children under 16, and we do not knowingly collect personal information from anyone under 16 through either site. Our store is not intended for anyone under 18, and only someone 18 or older may buy a service from us.

If a matter involves a minor, for example a custody or guardianship matter, portal access is given to the adult who has authority over the matter and not to the minor.

If you believe a minor has been given portal access or has joined our mailing list, email golong@long.law and we will remove it promptly.

How we protect information

We describe our practice here in general terms. We would rather do that than publish a catalogue of controls and invite you to treat it as a guarantee.

Connections to both sites are encrypted. The portal has no client password to steal, because access runs on a one-time link sent to an email address we have confirmed. A portal session expires, and you sign in again with a fresh link. The portal shows you your own matters and nothing else.

Inside the firm, access is limited to the staff who need it, and staff use of your portal view is logged. Card and bank details are entered on Clio's payment page, so there are no card numbers in our systems to lose.

There is one thing you control that we cannot. Your email inbox is the key to your portal. Keep it secure, and tell us if you think someone else has reached it.

No system is perfectly secure, and we will not tell you otherwise. If we learn that personal information has been exposed, we will tell the people affected, and any authority we are required to tell, in the manner and within the time the law requires.

Where information is stored

Information collected through our sites is stored on hosting infrastructure operated by Render in the United States.

The outside companies listed above hold data on their own infrastructure, and some of them may hold it outside the United States. Our sites are intended for use in the United States, and we rely on the terms each of those companies offers rather than on any separate cross-border transfer arrangement.

Changes to this policy

We update this policy when what we do changes. When we do, we change the effective date at the top of this page.

If a change materially expands what we collect, what we use it for, or which outside companies receive it, we will say so at the top of this page and date it. When a change matters to clients, we email them about it rather than relying on you noticing a new date on a web page.

We keep earlier versions of this policy, so if you need to know what it said on the day you bought or signed, ask us and we will tell you. Once someone has accepted a version, that text cannot be edited. An edit creates a new version and leaves the accepted text as it was.

We record which version you accepted, both when you sign in to the client portal and when you buy something on the store. That record holds the version, a fingerprint of the exact text you were shown, your email address, the date and time, the IP address the request came from, your browser, and how you accepted it. The fingerprint is the point: it lets us show that the words you agreed to are the words we still hold, rather than asking you to take our word for it.

The same applies to the mailing list. We keep the exact consent sentence you were shown each time you signed up, as a separate record that is added to and never overwritten, so if you ever ask what you agreed to and when, we can show you rather than describe it.

We do not make a change retroactive to information we have already collected without saying so plainly.

Contact

Questions about this policy, or about anything we hold about you:

• Email: golong@long.law
• Phone: (315) 991-8000

If you believe we are not following this policy, tell us first and we will look into it. You can also raise it with your state attorney general's consumer protection office, or with any privacy regulator in your state.