Legal

Privacy Policy

Last updated: July 3, 2026

Who we are

This website is operated by Greg Pagones / Cold Spring Main Street, a residential and commercial rental property owner located in Cold Spring, New York. You can reach us at greg@coldspringmainstreet.com.

What information we collect

We collect information you provide directly when you:

  • Submit a contact form — name, email, phone, and message
  • Submit a rental application — personal, employment, and financial information required to evaluate tenancy
  • Join the availability waitlist — name, email, and unit size preferences

Analytics — and what we specifically do NOT collect

This site uses PostHog for privacy-friendly analytics, configured as follows:

  • No cookies are set. Analytics data is stored in session memory only and is not persisted across visits.
  • No IP addresses are collected, transmitted to, or stored by any third party. Analytics requests are routed through our own Cloudflare infrastructure before reaching PostHog. PostHog's servers never receive visitor IP addresses. Geographic data (country, region, city) is derived from Cloudflare's geo headers and injected as anonymized properties — no raw IP address is transmitted at any point in this chain.
  • No session recording. We do not record, capture, or replay visitor screens, keystrokes, mouse movements, or form inputs.
  • No personal profiles. We do not build or maintain individual user profiles.
  • No third-party advertising pixels, tracking scripts, or data broker integrations of any kind. This site does not load Facebook Pixel, Google Ads tags, TikTok Pixel, or any similar tool.
  • We collect only: pages visited, approximate geographic region (country/city level only, derived without IP transmission), device type, and referral source.

Pen registers, trap-and-trace devices, and wiretapping statutes

This site does not operate, install, or authorize any pen register or trap-and-trace device as defined under 18 U.S.C. § 3127, California Penal Code § 638.50, or any analogous federal or state statute.

Specifically:

  • No third-party service receives visitor IP addresses from this website. Analytics requests are proxied through our own Cloudflare Worker, which strips identifying headers before forwarding to PostHog. No IP address "routing" or "addressing" information is transmitted to any third party.
  • No content of communications is intercepted. Analytics data is limited to metadata (page visited, device type, geographic region) and does not include form inputs, search queries, or any content entered by visitors.
  • No electronic surveillance of any kind is conducted on visitors to this site.
  • PostHog is configured with ip: false, explicitly disabling IP address collection at the application level, in addition to the infrastructure-level proxy described above.

This site has taken affirmative technical and architectural steps to ensure no pen register functionality exists, not merely as a matter of policy, but as a verified technical fact.

No data sales

We do not sell, rent, trade, license, share, or otherwise transfer personal information to any third party for commercial purposes. Ever. This applies to all visitors regardless of state of residence.

Email communications

Form submissions are processed through Resend, a transactional email service. Your information is transmitted securely and used only to deliver the email. Resend does not receive data for advertising or profiling purposes.

Data retention

Contact form submissions and waitlist signups are retained until you request deletion. Rental application information is retained for the period required by applicable New York State law. You may request deletion of your data at any time by emailing greg@coldspringmainstreet.com.

Security

This site is served over HTTPS. All form submissions are encrypted in transit. We take reasonable technical precautions consistent with the New York SHIELD Act.

Your rights

You may at any time request access to, correction of, or deletion of personal information we hold about you. Contact greg@coldspringmainstreet.com.

Children's privacy

This site is not directed at children under 13 and we do not knowingly collect information from children.

Changes to this policy

We may update this policy occasionally. The date at the top reflects the most recent revision.

Contact

Questions? Email greg@coldspringmainstreet.com or write to us at Cold Spring Main Street, Cold Spring, NY 10516.

A note for California residents

Required by California law. We have feelings about this.

Welcome to the privacy section written specifically for you — the California resident who has somehow navigated to a rental listing for a 2-bedroom apartment in a Hudson Valley village of 2,000 people. Truly remarkable. The internet is a vast and mysterious place.

Let us be absolutely clear: Cold Spring Main Street does not advertise in California. We do not target California residents. We do not want California tenants — not because we have anything against Californians as humans, but because our apartments are located in Cold Spring, New York, which is a 3,000-mile commute from Los Angeles and we genuinely cannot help you. If you are seriously considering renting an apartment in Cold Spring from California, we salute your spontaneity and suggest also consulting a map.

We do not sell your data. We do not share your data. We do not trade, barter, auction, license, rent, lend, give away, or otherwise monetize your data in any form. We are a small landlord in Putnam County. Our data operation consists of Greg reading emails. That's it.

This site does not operate pen registers, trap-and-trace devices, or any technology that could be characterized as such under CIPA § 638.51 or any other statute. Visitor IP addresses are not transmitted to any third party — including PostHog — at any point. We have gone to affirmative architectural lengths to ensure this is technically true, not merely a policy aspiration. There is no pen register claim to be found here. We checked. A lawyer checked. The Cloudflare logs confirm it.

If you wish to submit a CCPA request — to access, delete, or opt out of the sale of your personal information — you are welcome to email greg@coldspringmainstreet.com. Greg will respond within 45 days as required by law, likely with genuine bewilderment as to why a California resident submitted a request to a two-person operation in Putnam County. There is nothing to opt out of. There is nothing being sold. There is, however, a very nice apartment on Market Street if you are ever in the Hudson Valley.

We acknowledge the existence of plaintiff attorneys who mine CIPA and CCPA technical violations as a business model targeting websites with zero California connection. We would like those individuals to know: there is nothing here. We checked. Twice. The architecture was specifically designed with you in mind — not to accommodate you, but to leave you with nothing to work with. Come visit Cold Spring sometime. It's lovely. But there is no lawsuit to be found on these premises, and we wish you better luck elsewhere.

This section was written with genuine good humor and zero malice. Mostly.