Privacy, in plain words

What this site stores

• Your style pick. When you choose a style mode, your browser remembers it in local storage so the site looks the same next time. It never leaves your device.
• Your package. When you get a quick quote, your answers are saved as a draft so they can carry on into your project or travel to the contact page. Drafts nobody finishes are deleted after 30 days.
• Your project, saved as you go. When you start the project form, your answers are saved as a draft on this site after each step, so you can close the page and pick up later from your private link. Your browser remembers that link (in local storage) so it can offer to resume. Drafts you never finish are deleted automatically after 30 days, along with any files you added.
• Two small cookies, only for your project. Opening your private project link stores its key in a cookie, so the page still works when you refresh it. Signing in at your account keeps you signed in for 30 days; after that the cookie simply stops working (nothing about the session is stored on my side). Neither is ever used for tracking.
• Your account and sign-in codes. Your account is your email address and the projects under it. To sign in, you get a 6-digit code by email; only a scrambled version of it is stored, and it’s deleted within an hour, used or not.
• Your links, if you ask me to look them up. When you tap “Look these up”, this site reads the public pages you linked (your website and Google listing) and saves what it found with your project, so you can use it instead of typing. Your Google listing is read through Google’s Places service, and your website’s speed is checked with Google PageSpeed Insights, so Google receives the address you gave. Instagram, Facebook and TikTok are kept as links only.
• Screenshots. When you look up your website, this site takes a phone-sized screenshot of its public homepage (with Cloudflare’s browser service), so we can talk about keeping or rebuilding it. When you confirm, it takes phone screenshots of your three homepage designs for your project page, your quote and its email. They’re stored privately with your project and deleted with it.
• Sharing your designs, only if you ask. “Send these to my business partner” makes a private link to your three designs. The link doesn’t contain your name, email, quote or project reference; the page it opens isn’t indexed by search engines, and it stops working after 30 days or the moment you tap “Stop sharing”. If you email it from here, your partner’s address is used to send that one email and isn’t kept. When they tap “This one”, their pick is saved with your project.
• Reminders. After your deposit, if something I need from you (photos, logins) is still to come, you get up to two short reminder emails, on day 5 and day 12. Sending it, or tapping “I’ve sent it” on your project page, stops them.
• Changes after launch. When you ask for a change, I tell you how long it’ll take before I start. If it goes past your plan’s minutes, you approve the price first; your approval is saved with the time and your internet address, so we both have a record. The “Yes, go ahead” link in that email works once, for 14 days, and only for that change.
• A human check. Before looking up links, emailing you a link or a sign-in code, or sending your quote, a Cloudflare Turnstile check makes sure you’re a person. It doesn’t use tracking cookies.
• No analytics, no ad trackers. This site doesn’t use any, and no tracking cookies.
• Review-stand links. The tap-to-review stands in my clients’ shops open a short link on this site that forwards you to their Google review page. It counts that a tap happened, and nothing else: no IP address, no device details, no cookies.

When you contact me

When you send the contact form, your message is delivered to my inbox through Cloudflare’s email service. If you email me or book a call, I use your details only to reply and to work with you. I don’t sell or share them.

When you fill in the project form, your answers are saved in a private database (Cloudflare D1), and any photos or files you add are stored privately on Cloudflare (R2) or emailed to me. When you confirm, I get your answers and files by email, and you get your quote. The quote is emailed to you through Resend, an email delivery service, and it’s also on your project page, which only opens with your private link or when you’re signed in. Links in my emails never carry your key: they ask you to sign in, so a forwarded email doesn’t open your project.

How long I keep it

• Drafts nobody confirms: 30 days, then deleted with their files.
• Quotes that didn’t go ahead: 12 months after the last change, then deleted with their files.
• Projects we work on together: while we work together and for my business records afterwards.
• Sign-in codes: an hour at most. Sign-in attempts: a day.
• Share links to your designs: 30 days at most, or until you stop sharing. Screenshots: with your project.
• Server logs keep project references, never your email, codes or answers.

Ask me any time and I’ll delete everything I have about you: your projects, files, account and requests.

When you pay

Payments are handled by Stripe. Your card details go straight to Stripe and never touch this website. I receive your name, email, billing address and what you paid for. When you pay a deposit, Stripe keeps your card on file so the balance at launch and any monthly plan you choose can be charged without you typing it in again. Stripe shows this at checkout, and I’ll remove the card whenever you ask.

Booking a call uses Cal.com, which has its own privacy policy. This site is hosted on Cloudflare, which may keep standard server logs for security.

Questions or requests

Want to know what I have on file, or want it deleted? Email hello@thenerdnextdoor.ca and I’ll sort it out.