Privacy, in plain English.

Short version: I collect what you give me, I use it to do the work you hired me for, I don't sell it, I don't track you across the web, and I delete it if you ask.

What I collect

When you contact me: name, email, phone if you share it, business name, city, industry, project type, and whatever you write in the brief. Stored with it: the IP address, country and referring page the request came from, which the site uses to keep spam out. A text or a call reaches my phone like any other.

When you visit the site: Cloudflare (my host) logs standard server stuff like IP address, browser, and referrer. No Google Analytics. No Facebook Pixel. No advertising trackers. No cross-site cookies.

What this site loads, and where your words go

• Every page: Cloudflare hosts it, and Cloudflare Web Analytics counts page views with a small script from static.cloudflareinsights.com. It sets no cookies.
• The brief form on /contact: Cloudflare Turnstile, from challenges.cloudflare.com, checks for spam. A brief you send is stored in my Cloudflare account and a copy is emailed to me.
• The free audit on /audit: the address you enter goes from my server to Google PageSpeed Insights and Mozilla Observatory, which score it. Results are kept for six hours so a repeat check is quick, and your IP address counts toward a daily limit.
• The MyKonos chat demo: what you type, and your IP address for its five messages a day, goes to my own server, which runs it through an AI model provider.
• Cal.com, email and text: those open only when you tap them.

What I do with it

I answer your message, scope your project, prepare a quote, deliver the work, and keep in touch on active builds. That's the whole list. I don't sell, rent, share, or trade client information with marketing companies, data brokers, or anyone else.

Where it lives

Client emails sit in standard business inboxes. Project code sits in private GitHub repos I control. Anything I build for you that handles your customers' data uses encryption in transit (HTTPS), row-level security on the database, and patched dependencies. I treat your data like I'd want mine treated.

Third parties I rely on

Cloudflare hosts the site and DNS, checks forms for spam and counts page views. If you choose to pay an invoice online, Stripe takes the card or bank payment, and your card details never touch my servers. Supabase or similar managed backends run client apps when contracted. Google and Mozilla score the sites people run through the audit. Each one has its own privacy policy.

Your rights

Email preston@winterscode.com and ask for any of these:

• A copy of what I have on you
• Corrections to anything that's wrong
• Full deletion, no questions asked
• To opt out of any future contact from me

I'll honor it within a week. Usually same-day.

Children

This is a business-to-business service. Nothing here is aimed at children under 13, and I don't knowingly collect information from minors.

When this changes

If I update this policy in any meaningful way, the date at the top moves and the change shows up in the site's public git history (/changelog). Everything is on the record.

Questions

I'm a person. Text 541-551-0731 and it reaches me directly, or email preston@winterscode.com. Or just stop me on the street in Bandon.