Your Privacy, Protected.

01Information We Collect

Information you give us

When you fill in our contact form, email us, book a consultation, or become a client, you may share information such as your name, email address, phone number, business name, website address, and details about your project.

Our contact form

Our contact form asks for your name and email address, and optionally your phone number, business name, current website, the services you are interested in, your timeline, and a message. When you send it:

• Your message is delivered to our Google Workspace inbox by Resend, our email delivery provider. It is not saved in a database on our website.
• Your email address is set as the reply address, so we can answer you directly.
• Cloudflare Turnstile checks that the form is being sent by a person and not a spam bot. To do this it looks at technical signals from your browser, such as your IP address and browser details. It does not ask you to solve puzzles in most cases.

If you start from our audit page, the form may be pre-filled with your website address and a short summary of your results. You can edit or remove it before sending.

Information collected automatically

Our website is hosted and protected by Cloudflare. Like any website, each visit sends standard technical information to Cloudflare’s servers, such as your IP address, browser type, device type, the pages you request, and the time of the request. This is used to deliver the site and protect it from attacks and abuse. We do not use this information to build profiles of visitors.

Our free website audit

When you run a scan, the website address you enter is sent to our scanner, which requests that site’s public homepage the same way a web browser would and checks its security settings. The report is shown to you and is not saved by us. As with any request to our site, Cloudflare’s standard logs may briefly record that a scan was requested.

The security habits check is scored entirely in your browser. Your answers are never sent to us unless you choose to send us your results.

02How We Use Information

We use the information we collect to:

• Reply to your questions and requests
• Prepare quotes, proposals, and redesign concepts
• Design, build, host, secure, and maintain websites and apps for our clients
• Send invoices and keep business and tax records
• Keep our website secure and working properly
• Meet our legal obligations

We do not sell your personal information, share it for advertising, or use it to profile you.

03Cookies and Browser Storage

Our website does not use analytics, advertising, or tracking cookies, and it does not save information in your browser’s storage.

Cloudflare may set a small number of strictly necessary security cookies, including for the Turnstile spam check on our contact form, to tell real visitors apart from automated bots and to protect the site. These cookies do not track you across other websites.

Because we do not track visitors across sites, there is nothing for “Do Not Track” or Global Privacy Control signals to switch off, but we respect them.

04Third-Party Services

We use a small number of trusted providers to run our website and business:

• Cloudflare hosts our website, runs our audit scanner, and protects the site from attacks. Our contact form uses Cloudflare Turnstile, which checks technical signals from your browser to tell people apart from spam bots. Cloudflare’s privacy policy
• Resend delivers messages sent through our contact form to our inbox. Resend’s privacy policy
• OpenStreetMap provides the maps on our local area pages. When a map loads, your browser requests it directly from OpenStreetMap, which receives your IP address. OpenStreetMap’s privacy policy
• Google Workspace provides our business email and stores the messages you send us and our replies. Google’s privacy policy

Our website fonts are hosted on our own servers, so loading our pages does not send your information to font providers. Links to other websites are not covered by this policy.

05How We Share Information

We only share personal information:

• With service providers that help us run our business, such as hosting and email, and only as needed for them to provide their service
• With your permission, for example when you ask us to work with your other vendors
• When required by law, or to protect the rights, safety, and security of our clients, our business, or others
• As part of a sale, merger, or transfer of our business, in which case this policy would continue to apply to your information

06Protecting Client Information

Clients often trust us with sensitive access, such as hosting, domain, and website logins, along with site files, databases, and backups. We protect that information with the same care we bring to securing our clients’ websites:

• Logins and passwords are stored in an encrypted password manager, never in plain text documents or notes
• We ask clients to share logins through a secure method rather than plain email whenever possible
• Access is limited to the people actively working on your project, and our own accounts are protected with two-factor authentication
• Site files, databases, and backups are stored on secure, access-controlled systems
• When a project or service ends, or whenever you ask, we remove the access and credentials we no longer need
• We recommend changing any shared passwords once your project is handed over

Specific terms for each project, including how long we keep backups, are set out in your project or service agreement.

07How Long We Keep Information

We keep emails and project records for as long as we need them to work with you and to meet business, tax, and legal requirements, and then delete them. Contact form messages are kept in our Google Workspace inbox on the same basis. Resend keeps a record of each delivered email, including its contents, for a limited time so delivery problems can be investigated, and then deletes it under its own retention policy. Audit scans are not stored. Cloudflare keeps its standard technical logs for a limited time under its own retention policies.

08How We Protect Information

Security is the core of what we do. Our website uses HTTPS, strict security headers, and a content security policy, and access to our systems is limited and protected with two-factor authentication. No method of storing or sending information online is completely secure, but we work hard to protect yours.

09Your Choices and Rights

You can ask us to:

• Tell you what personal information we have about you
• Correct information that is wrong
• Delete your information, unless we need to keep it for legal or business records
• Stop contacting you

Depending on where you live, you may have additional rights under state privacy laws, such as the Minnesota Consumer Data Privacy Act. We are happy to honor these requests for anyone who asks. Email us at [email protected], and we aim to respond within 30 days. We may need to confirm your identity before acting on a request.

10Children’s Privacy

Our website and services are meant for businesses and adults. We do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, contact us and we will delete it.

11Changes to This Policy

We may update this policy as our website and services change. When we do, we will update the “Last updated” date at the top of this page. If we make a significant change, we will make it clear on our website.

12Contact Us

If you have questions about this policy or how we handle your information, contact us: