This page describes what this website actually does today, and we intend it to be relied on. Two things are still open: the exact registered name of the company that operates HOAPrepared is being confirmed with the Wyoming Secretary of State, and this text has not yet been reviewed by an attorney. If anything here matters to a decision you are about to make, write to us first.
Privacy Policy
Effective August 9, 2026
This policy describes what https://hoaprepared.com does with information about the people who visit it. It describes what the site does today, not what it might do later. If we start doing something else, this page changes first.
Who we are
HOAPrepared is operated by MarketPulse Lab, a company formed in Wyoming, United States. That company decides what information this website collects and why, which makes it the one answerable for it.
Write to raphael@hoaprepared.com for anything in this policy — a question, a copy of your information, a correction, or a deletion. We do not publish a postal address for privacy requests, because email reaches us faster and is the address we actually monitor.
What this policy covers
This policy covers https://hoaprepared.com — this website and nothing else.
It covers one thing that happens off this website: when you submit a form here, what you typed is sent to our own application at app.hoaprepared.com, which stores it. That path is described in this policy, under the sections on what you give us and who else sees it.
It does not cover having an account in the HOAPrepared application, because accounts are not open. When they open, the application will handle association records, contacts and documents, and this policy will be extended to describe that before the first customer uses it — not afterwards.
Information you give us
Three forms on this site ask for information. Each one collects only what is listed here, and every field is one you fill in yourself:
- The waitlist form: your email address, your state, whether your association is a homeowners association or a condominium association, and — optionally — its name.
- The compliance checklist form: your email address, your Florida county, a size range for your association, and — optionally — its name.
- The "email me this result" box on a free tool: your email address, and the result the tool produced from what you typed.
Alongside a form submission we attach some context about where the request came from: which form it was, the page you submitted it from, the plan you had clicked if you arrived from the pricing page, the campaign tags in the link you followed (utm_source and its siblings, and gclid), the external site that referred you, the first page you landed on, and the time of submission. This is kept in your browser's session storage under the key hoaprepared.attribution, for the length of your visit, and is sent only when you submit a form. It is not a cookie and it does not follow you between visits.
Where it goes: your submission is sent from your browser to our own application at app.hoaprepared.com, which records it in our database so that a person on our side can read it and reply. No third-party form service sits in between — the two are ours. Until August 9, 2026 these forms reached nothing at all and failed with an error; from that date they reach us, and this section changed on the same day, which is what the promise at the end of this page requires.
Two things are recorded with your submission that you do not type: your IP address and your browser's user-agent string. They are kept with the submission because they are what lets us tell an automated flood of fake submissions from real people asking to hear from us. They are not used to build a profile of you and are not passed to anyone else.
If you email us directly, we keep your message and your address so we can reply and so we have a record of what was said.
Information collected automatically
Hosting. This site is hosted by Hostinger. Like any web server, theirs receives the technical information needed to send you a page — your IP address, the address of the page you asked for, your browser and operating system, and the time — and keeps short-term logs of it for security and troubleshooting. We do not use those logs to build a picture of you, and we do not combine them with anything else.
Measurement. Every page of this site loads two measurement tools, described in the next two sections. Between them they record which pages are read, how people move through the site, and whether forms are started and submitted. Neither is used for advertising, and neither is used to work out who you are.
Events we record ourselves. We send our own small events to Google Analytics when a form is started, submitted or fails, and when a free tool produces, saves, copies or emails a result. These events carry only a technical identifier — which form, which tool, and for a failure, whether it was a timeout, a network error or a server error. They carry nothing you typed. The code that sends them accepts no free-form values, so an email address cannot be attached to one even by mistake.
Google Analytics 4
We use Google Analytics 4 to count visits and see which pages are read. It sets two cookies in your browser, _ga and _ga_DWGND48RX2, which give your browser a random identifier so that several page views can be recognised as one visit. They are not linked to your name or your email address.
Google receives your IP address in order to work out an approximate location — country, region, city — and to guard against abuse. Google states that for visitors from the European Economic Area, the United Kingdom and Switzerland it does not log or store individual IP addresses, and that the address is used for that lookup and immediately discarded. For visitors elsewhere, including the United States, we do not control how long Google holds the address.
We do not use Google Analytics for advertising, we do not run Google Ads, and we do not send Google anything you type into a form or a tool.
Microsoft Clarity
We use Microsoft Clarity to see how pages are actually used — where a cursor moves, what is clicked, how far a page is scrolled — and to replay a visit as a reconstruction of those movements. This is how we find the parts of a page that do not work. It sets two cookies, _clck and _clsk.
What Clarity does not capture: anything you type into a text box or choose from a drop-down. Microsoft masks the contents of input fields and drop-downs in every mode, and that cannot be switched off. We have also marked every form on this site with an attribute that tells Clarity to mask the whole form and everything inside it, so the protection does not depend on a setting in a dashboard that someone could change later.
Clarity works out an approximate location from your IP address. Microsoft keeps the recordings for about thirty days and then they go. Microsoft does not offer a way to delete one person's recordings on request — the only deletion it supports is deleting the whole project — so a deletion request about Clarity data is one we can acknowledge but cannot carry out for a single visit. We would rather tell you that than promise otherwise.
The free tools
The free tools calculate in your browser. The dates, periods, names and lists you type into them are not sent to us and never reach our hosting or our measurement tools. Saving a result downloads a file to your own device; copying one puts it on your own clipboard.
The single exception is the box that offers to email you a result. If you use it, the result and your email address are sent — and, as noted above, that box is currently switched off for want of a configured destination.
What we use information for
We use what we collect for these purposes and no others:
- Serving the website and keeping it working.
- Replying to you when you write to us, or when you ask us for something.
- Keeping a waitlist, so we can tell you when HOAPrepared reaches your state and your type of association.
- Understanding which pages are read and which are ignored, so we can write better ones.
- Seeing where a page confuses people, so we can fix it.
- Knowing which channel brought a visitor, so we know where to spend effort.
- Security, and preventing abuse of the site and its forms.
We do not use any of it for behavioural or targeted advertising. We do not build advertising profiles, and we do not run ads on this site.
We do not make automated decisions about you, and there is nothing on this site that profiles you in a way that produces an effect on you.
If we wrote to you first
We sometimes write, one message at a time and by hand, to organizations working with Florida community associations — chapters, publications, firms — to introduce this site. The addresses come from those organizations' own public pages.
Receiving one of those emails does not make you a subscriber, does not put you on a mailing list, and does not create an account. There is no newsletter. If you would rather not hear from us again, reply and say so; we keep a short note of the address so we do not write to it twice.
How long we keep it
Waitlist and form submissions: kept until you ask us to delete them, or until it is clear we will never open in your state and type of association. We review the list once a year and delete what has gone stale. We are not going to invent a tidier number than that, because a policy that says ninety days while the data sits in a database forever is worse than an honest description.
Emails you send us: kept while we need them for the conversation and our records, and deleted on request.
Google Analytics: kept for the retention period set on our Analytics property. Google offers a choice of two months or fourteen months for user-level and event-level data; we are confirming which is set on ours and will state it here. Aggregate reports, which are not about any one visitor, are kept indefinitely.
Microsoft Clarity: about thirty days, as set by Microsoft, then it is gone.
Hosting logs: kept for the short period our host keeps them for security and troubleshooting.
Your choices, and what we can actually do
Write to raphael@hoaprepared.com and we will, for anyone who asks and wherever they live:
- Tell you what we hold about you, and where it came from.
- Correct it if it is wrong.
- Delete it, unless we are required to keep it.
- Stop writing to you.
We offer this because it is simple to do with the small amount of information this site collects — not because we have worked out that a particular statute obliges us to. Some privacy laws apply only to businesses above a size we have not reached, and we would rather give you the option than argue about whether we have to.
What we cannot do, and will not pretend to: delete an individual visit from Microsoft Clarity, because Microsoft does not offer it; or identify you inside Google Analytics from your email address, because nothing links the two. If you ask us to delete your analytics data, what we can honestly offer is to tell you how to block both tools, and to confirm that Clarity's own copy expires in about a month.
If a law where you live gives you more than this — a right to object, to restrict processing, to data portability, or to complain to a supervisory authority — you keep it, and writing to the same address is the way to use it. We will not ask you to prove where you live before helping you.
How it is protected
The site is served over HTTPS, so what passes between your browser and it is encrypted, and the submission it sends to our application travels over HTTPS too. The website itself is static: there is no database behind the pages you read and no application server to break into.
What you submit through a form is a different matter, and we will not repeat the old sentence that there is no database, because there now is one. It sits behind our application, only that application talks to it, the connection to it is encrypted, and the endpoint your browser posts to accepts submissions only from this website's own addresses and limits how many any one connection can send. What we are not going to do is describe that as audited or certified, because it has not been.
Access to the hosting and measurement accounts is limited to the people who need it. No system is perfectly secure, and we do not claim otherwise. If information were ever exposed, we would tell the people affected.
Children
This site is for adults serving on or working with homeowners association boards. It is not directed at children, and we do not knowingly collect information from anyone under 13. If you believe a child has sent us something, write to us and we will delete it.
Changes to this policy, and how to reach us
When this site starts doing something new with information — connecting the forms, adding an email provider, opening the application — this page changes before that happens, not after. The effective date at the top tells you when it last changed.
Anything at all about this policy: raphael@hoaprepared.com.