This policy describes what this site actually does today, in plain language rather than in the broadest wording a lawyer could defend. Where something is likely to change — adding analytics, or self-hosting the fonts — it is named as a foreseeable change instead of being covered by a vague clause now. It is written to be reviewed by a qualified lawyer, and it will be updated as the site changes.
Incorporation Bureau publishes information about forming US companies and compares the services that help you do it. We are read by founders in dozens of countries, many of whom are not US residents. That means two different privacy regimes apply to us at once, and we would rather over-explain than leave you guessing.
Effective date: 17 August 2026
Who runs this site
Incorporation Bureau at incorporationbureau.com is owned and operated by Incorporation Bureau, referred to below as "we" or "us". Where the GDPR applies, that entity is the data controller. Where the CCPA/CPRA applies, that entity is the business.
Incorporation Bureau is a privately owned website. It is not a government agency, is not affiliated with any Secretary of State or the IRS, and is not a law firm. We cannot file anything on your behalf and we hold no records about your company.
The short version
- We have no accounts and no logins — there is nothing to sign up for.
- There is no form anywhere on this site that submits data. Not a newsletter box, not a contact form, not a quote request.
- We never handle payments. We are not a merchant and never see card details.
- We set no cookies and write nothing to your browser's local storage.
- We do not sell or share personal information, and we run no advertising network.
- Two things do still leave your browser, and they are described in full below: our web fonts load from Google, and clicking a partner link hands you over to that partner.
What we actually collect today
This table is written against what the site's source code does right now, not against what a template says a website usually does.
| Account & profile data | None. No accounts exist. |
|---|---|
| Form submissions | None. The site contains no form that submits anywhere. The free tools listed under Tools are still in development; if any of them ever accepts input, it will run entirely in your browser and this policy will be updated before it ships. |
| Payment data | None. We never take payment. If you buy from a partner, you buy from them, on their site, under their terms. |
| Cookies set by us | None. No cookie, no localStorage, no sessionStorage, no fingerprinting script. |
| Analytics | Not installed today. See "Analytics we plan to add" below. |
| Server logs | Our hosting provider, Cloudflare, keeps standard access logs as part of serving and protecting the site. These typically record IP address, user-agent, requested URL, referrer and timestamp. We do not use them to build profiles and we do not combine them with anything else. |
| Web fonts | Every page loads four typefaces from fonts.googleapis.com and fonts.gstatic.com. Making that request discloses your IP address and user-agent to Google, who process it under their own privacy policy. We receive nothing from it. We are actively considering self-hosting the fonts to remove this entirely. |
| Media | Background video and images are served from this site's own domain. There are no YouTube, Vimeo or third-party media embeds. |
| Partner link clicks | See "Affiliate links" below. We do not log your clicks ourselves. |
Affiliate links, and what happens when you click one
We earn a commission when a reader forms a company or opens an account through some of our outbound links. Those links are labelled Partner where they appear and carry rel="sponsored nofollow" in the markup. Our full disclosure of that relationship is in the Terms of Use.
What matters for your privacy is the mechanics:
- A partner link may carry a sub-ID in the URL. The sub-ID identifies which page and which slot on that page produced the click — for example compare-best-registered-agent-1. It does not identify you. It is not derived from your IP address, your browser or anything about you, and it is the same string for every visitor who clicks that button.
- We do not receive, and do not want, your name, email or order details from partners. What we see are aggregate counts of clicks and conversions per link, provided by the affiliate programme.
- Once you land on a partner's site, you are on their site. They will set their own cookies, run their own analytics and apply their own privacy policy. We have no control over and no visibility into any of it.
The partners we currently link to are: Northwest Registered Agent, doola, Firstbase, Bizee, ZenBusiness, LegalZoom, Harbor Compliance, Wise, Mercury and Revolut. We also link to official .gov registries and to IRS.gov; those are government sites, not partners, and we earn nothing from them.
Analytics we plan to add
We do not run analytics today, but we expect to, because we need to know which guides are worth maintaining. When we do, it will be no analytics provider at all: this site runs none today, and this page will be updated before that changes, and we commit to the following before it goes live:
- A privacy-respecting product that measures pages, not people — no cross-site tracking, no advertising network, no data brokerage.
- No selling or sharing of anything it collects.
- This page updated before the script is installed, naming the provider, saying what it stores and for how long.
- If the product we choose requires consent under EU/UK law, a consent mechanism ships with it — not after it.
Until then, a statement that this site runs no analytics is simply true.
Why we are allowed to process anything at all (GDPR / UK GDPR)
If you are in the EU, the UK or another jurisdiction with equivalent law, the small amount of processing described above rests on these legal bases:
- Legitimate interests (Art. 6(1)(f)) — for hosting-level access logs, which are needed to serve the site, keep it available and defend it against abuse. Our interest is running a website securely; the impact on you is minimal and no profiling occurs.
- Legitimate interests — for aggregate, non-identifying measurement, once analytics exists and if the chosen product qualifies.
- Consent (Art. 6(1)(a)) — for anything non-essential that stores or reads information on your device. Nothing currently falls into this category, which is why you see no cookie banner.
Loading Google Fonts involves a transfer to Google. That is disclosed above rather than buried, and removing it by self-hosting the fonts is under active consideration.
Your rights if you are in the EU or UK
You have the right to request access to your personal data, correction, erasure, restriction of processing, portability, and to object to processing based on legitimate interests. You may also lodge a complaint with your national supervisory authority.
We should be honest about what these rights reach in our case: we hold no database, no mailing list and no customer records. In practice a request to us can only concern hosting-level access logs, and we usually cannot connect a log line to a named person without more information than we have. If you want us to try, tell us the approximate date, time and page. We will respond within one month.
no representative has been appointed under GDPR Article 27; if one is required, it will be named here
Your rights if you are in California (CCPA / CPRA)
In the twelve months preceding this policy's effective date, the categories of personal information involved are limited to internet or network activity and identifiers in the narrow sense of an IP address, both arising from standard hosting logs. We collect them for the purpose of delivering and securing the site. The source is you, through your browser.
- We do not sell personal information and have never done so.
- We do not share personal information for cross-context behavioural advertising. There is no ad tech on this site.
- We do not knowingly collect or process sensitive personal information.
- You may request to know, delete or correct personal information we hold, and you will never be discriminated against for asking. As above, what we hold is minimal.
- You may use an authorised agent. We may need to verify the request.
Because no sale or sharing occurs, there is nothing for a "Do Not Sell or Share My Personal Information" control to switch off — but if you want to exercise any of these rights, or ask us to confirm the position, write to us at the address below and we will answer.
Children
This site is aimed at adults forming businesses. It is not directed at children, and we do not knowingly collect information from anyone under 16 (under 13 in the United States).
International transfers
The site is served from our host's global infrastructure and the business behind it is Incorporation Bureau, in the country where its operator is established. Visiting from outside that country necessarily involves an international transfer of the technical data described above. the standard contractual clauses relied on by our hosting provider
Retention
We retain nothing ourselves, because we store nothing ourselves. Hosting logs are retained by Cloudflare for the short period stated in that host’s own documentation. If analytics is added, its retention period will be stated here at that time.
Security
This is a static site: plain HTML, CSS and a little JavaScript, served over HTTPS. There is no database, no login and no user data store, which removes most of what could be breached. No method of transmission over the internet is completely secure, and we make no absolute guarantee.
Changes to this policy
If we change what we collect, we will update this page and change the effective date at the top. Two changes are foreseeable and already flagged above: adding analytics, and possibly self-hosting the fonts. Material changes will be described plainly rather than folded silently into a new version.
How to contact us
Privacy questions, and any request under the GDPR, UK GDPR or CCPA/CPRA, go to privacy@incorporationbureau.com. Please put "Privacy" in the subject line. We handle these requests by email; if a postal address is required in your jurisdiction, ask and we will provide one.
We cannot answer questions about your specific company, filing or tax position — see the Terms of Use for why. For official filings, use your state's .gov registry directly.