Publication operations

Privacy & Data Handling

A concise account of what this website collects, why it is collected, and where it goes.

Effective date: 2026-09-16. This notice describes the site's current production implementation. It is informational and is not presented as legal advice.

Who operates this site

The Packaging Buyer is Matt Louie's independent educational publication. It is not owned or operated by Poly Craft Industries. Matt is a New York-based flexible-packaging sales professional, and packaging inquiries may become business conversations through his work at Poly Craft Industries when that is why a reader contacts him.

Information you choose to submit

The RFQ form accepts the name, company, work email, optional telephone number, packaging details, and notes a reader chooses to provide. Article requests, corrections, and enabled handoff forms collect only the fields shown. The server validates and delivers an accepted submission to Matt at Matt@PolyCraftInd.com; it does not report success unless the delivery provider accepts the message. Secure web uploads remain a separate feature and stay unavailable unless they are explicitly enabled.

The newsletter form collects an email address, an explicit consent response, the source page, and a consent timestamp. Some versions of the form also offer optional first name, company, and packaging-interest fields. The site sends those details to Buttondown to create and manage a double-opt-in newsletter subscription.

How the information is used

Information submitted through an enabled form or sent directly by phone, text, or email is used to respond to the request, understand the packaging question, review a correction or editorial suggestion, and continue the conversation the reader initiated. Packaging project inquiries may become business conversations through Matt's work at Poly Craft Industries when that is why the reader contacts him.

Newsletter information is used to request confirmation, manage the subscription, deliver the publication after confirmation, prevent duplicate records, and honor unsubscribe requests. The site does not report a successful signup when Buttondown rejects or cannot process the request.

Files and private project information

Web uploads are disabled. The site does not accept or store package files, quotes, specifications, artwork, or photos in public or private web storage during the soft launch. Readers who choose to email a file should send only what Matt needs to understand the request. The current application does not submit package files to an external AI model or publish them.

Service providers and other recipients

Vercel hosts the production site and necessarily processes web requests, network information, and operational or security logs. Direct calls, texts, and emails are handled by the applicable telephone or email providers. Clicking Matt's LinkedIn link leaves this site and is governed by LinkedIn's practices. Packaging business inquiries may be handled through Poly Craft Industries when that is the purpose of the direct contact.

Buttondown receives newsletter signup details and manages confirmation, subscriber status, newsletter delivery, and unsubscribe suppression. When lead forms are enabled, Resend or the configured lead receiver processes the submitted message for delivery to Matt's Poly Craft Industries inbox. Private Vercel Blob storage remains inactive unless secure uploads are separately enabled. First-party site search does not transmit, track, or store search queries; it runs in the reader's browser.

PostHog receives the limited site-usage events described below through its United States ingestion service. It is not used for advertising or remarketing.

Ask Packaging AI

The current Ask Packaging AI tool uses a bounded set of approved content included with this site. It does not call an external AI model, interpret uploaded files, or send the conversation to Matt automatically. If a reader chooses the direct email action, the reader's email application—not this website—controls what is sent.

Analytics, cookies, and browser storage

The site uses PostHog for limited, cookieless audience measurement. It records page paths and selected events such as content or tool views, contact-link clicks, newsletter outcomes, and accepted lead submissions. Event properties contain general page, content, tool, and form-type context—not names, email addresses, telephone numbers, message text, file names, search queries, or package specifications. Query strings and URL fragments are removed before URL properties are sent.

PostHog is configured in always-cookieless mode with person profiles, user identification, autocapture, session replay, surveys, feature flags, and automatic form/input capture disabled. It does not store PostHog identifiers in cookies, local storage, or session storage, and it respects browser Do Not Track signals. PostHog still processes event and network/request information needed to receive events and calculate its privacy-preserving audience measurement. Advertising and remarketing are not enabled.

The private operations area uses a strictly necessary, HTTP-only session cookie only after an authorized administrator signs in.

Operational logs and abuse prevention

The newsletter and lead endpoints use request limits and non-PII structured outcome logging. The application does not write names, email addresses, phone numbers, file names, project notes, or message contents to its structured delivery logs. Vercel, Buttondown, Resend, PostHog, or another configured delivery provider may keep their own operational, delivery, security, or request records according to their service settings; those records can include network information such as IP address and user agent.

Retention and deletion

The application does not create a separate lead database. An enabled lead-delivery provider and the receiving email service may retain message and delivery records according to their settings. Buttondown retains newsletter subscriber information and unsubscribe suppression so it can operate the subscription and honor opt-outs. Direct email, telephone, text, analytics, Vercel request, and security records are retained according to the applicable provider's settings and as reasonably needed to operate the publication, respond, manage the initiated conversation, meet legitimate business-record needs, or address legal and security issues.

Sharing and sale

The site does not sell or rent submitted personal information. Information is shared only with providers needed to operate the site and deliver the requested service, with the people or business needed to respond to the packaging inquiry, when required by law, or to protect the site and its users.

Your choices

You can choose not to submit a form, call, text, email, subscribe, follow an external link, or use the Ask Packaging AI tool. PostHog respects enabled browser Do Not Track signals. Newsletter subscribers can use the unsubscribe link in any issue or the site's unsubscribe form. You can ask about, correct, or request deletion of information associated with a direct conversation by emailing Matt@PolyCraftInd.com. Some records, including an unsubscribe suppression, may need to be retained to honor the request or for security, contractual, business-record, or legal reasons.

Security

The site uses HTTPS, access controls, request limits, server-only provider credentials, input limits, and disabled-by-default upload and delivery controls intended to reduce avoidable risk. No internet transmission or storage system can be guaranteed completely secure. Do not submit, email, or otherwise send information that is unnecessary for Matt to understand and respond to the packaging request.

Children

This business publication is not directed to children under 13, and it does not knowingly seek personal information from children.

Updates and contact

This notice may be updated when the site's providers or collection practices change. The date above will be revised when a new version becomes effective. Questions about this notice can be sent to Matt Louie at Matt@PolyCraftInd.com or by calling or texting 516-849-6237.