Privacy

Privacy Policy

This page explains what data Decision Tree Research collects when you visit decisiontreeresearch.com or interact with the firm’s contact form, newsletter, or podcast properties — and what we do and don’t do with that data.

If anything here is unclear, or if you have a specific privacy request, please use the contact form.

What we collect

Information you provide

  • Email addresses you give us through the contact form or the newsletter subscribe forms.
  • Your name, organization or affiliation, and the content of your message when you submit the contact form.
  • Your subscription status if you sign up for the Decision Tree newsletter at newsletter.decisiontreeresearch.com (handled by Substack — see “Third parties” below).

Information collected automatically

The site uses Cloudflare’s hosting infrastructure and Cloudflare Web Analytics. These services collect aggregate, cookieless data about visits — IP address (used for rate limiting and security, not stored long-term), country, browser type, page URLs visited, and referrer. Cloudflare Web Analytics does not set cookies, does not assign persistent visitor IDs, and does not track individuals across visits.

The site uses Cloudflare Turnstile on the contact form to protect against spam. Turnstile verifies that submissions come from humans rather than bots; it does not track visitors across the web.

The site does not use Google Analytics, Facebook Pixel, or any third-party advertising or retargeting trackers.

How we use it

  • The email addresses you give us through the contact form are used to reply to your inquiry. We may follow up if your inquiry warrants further conversation.
  • Newsletter subscribers receive the Decision Tree newsletter — research and analysis from Gregory C. Allen, sent infrequently and only when there is something worth reading.
  • Aggregate analytics inform editorial decisions about which topics resonate. We don’t analyze individual visitors.

Third parties we use

A short list of services that help operate the site. Each handles narrow, defined data:

  • Cloudflare — hosts the site (Cloudflare Pages), provides DDoS protection and the Turnstile bot challenge, runs cookieless visitor analytics, and previously provided the email-OTP gate during private preview.
  • Resend — delivers email from the contact form to a Decision Tree Research inbox and sends the auto-reply confirmation back to you. Resend acts as the email transport; it does not have access to your data outside of message routing.
  • Substack — hosts the Decision Tree newsletter at newsletter.decisiontreeresearch.com. When you subscribe through any of the inline forms on this site, your email is registered with Substack, which has its own privacy policy at substack.com/privacy.
  • Buzzsprout — hosts the AI Power Podcast. Listening data is aggregated by Apple Podcasts, Spotify, or whichever app you subscribe through.

We have no other third-party integrations on the site.

What we don’t do

  • We don’t sell, rent, or share your email address with anyone outside the third-party services listed above.
  • We don’t run third-party advertising on the site.
  • We don’t use tracking cookies. Cloudflare Web Analytics is cookieless. Substack and Buzzsprout may set their own cookies on their own domains.
  • We don’t use retargeting pixels — no Facebook, no LinkedIn Insight Tag, no Google Ads conversion tracking.

Your rights

If you’re an EU resident, the GDPR gives you specific rights, including the right to access, correct, delete, or export your data. If you’re a California resident, the CCPA gives you similar rights. Anyone, anywhere, can exercise these rights — we don’t gate them by jurisdiction.

To make a request:

  • Unsubscribe from the newsletter — every newsletter email includes a one-click unsubscribe link, or you can manage your subscription directly at newsletter.decisiontreeresearch.com.
  • Request data access or deletion — submit a request through the contact form. We aim to respond within 30 days.
  • Object to processing or request data export — same channel.

Cookies

The decisiontreeresearch.com site itself sets no cookies. Substack and Buzzsprout, when you visit their hosted properties (newsletter.decisiontreeresearch.com or podcast directories), may set cookies under their own privacy policies.

Data retention

  • Contact form submissions — emails received via the contact form are retained for as long as needed to handle the inquiry and any follow-up. Routine retention is roughly two years.
  • Newsletter subscribers — retained for as long as you remain subscribed. Unsubscribed addresses are removed from the active list within 30 days.
  • Analytics data — Cloudflare retains aggregate metrics for the standard window provided by their service.

Changes to this policy

We may update this policy as the site evolves. Material changes (new third parties, new data uses, etc.) will be flagged on this page with a revised “Last updated” date below.

Contact

Privacy questions or requests: please use the contact form. A postal address is available on request.

Last updated: May 2026.