Privacy. Straight answers.

One thing: form submissions.

IntegrityBuilds.dev is a static site with one form. The contact form on the home page POSTs to a Cloudflare Pages Function that writes the submission to a database (Cloudflare D1) and emails me. That is the only data this site stores about you.

The submitted record contains:

• The name and email you typed
• The project type you selected and the project brief you wrote
• Your preferred call times and timezone
• The page you arrived from (the referrer)
• A hash of your IP address (SHA-256 with a server-side salt, not the raw address)
• Your browser's user-agent string
• A timestamp

That's the whole list. No Google Analytics, no Facebook pixel, no third-party tracking script, no cookies set by this site. The host (Cloudflare) collects standard edge request metadata in the normal course of serving any website (timing, country, user-agent) and, if Web Analytics is enabled, an anonymous page-view ping. None of that is shared with me beyond aggregate counts.

So a database leak does not expose visitors.

Raw IPs identify people. Hashed IPs don't, but they're still stable enough to let me spot repeat submissions from the same source (useful for triaging spam). The hash uses SHA-256 with a salt stored in a server-side environment variable. The plaintext IP never lands in the database.

Cloudflare D1, in the United States.

The submission database (D1) is hosted by Cloudflare. The notification email is sent via Resend (a transactional email provider) to my personal inbox at [email protected]. I review submissions manually. There is no CRM, no marketing automation, no third-party tracking.

Until I reply, or 90 days, whichever is longer.

Submissions stay in the database while I work the inbound. Active threads are kept for client-relationship reasons; inquiries I've replied to and closed get deleted after 90 days unless you've become a client.

None set by this site.

This site sets zero cookies. Cloudflare's CDN may set its own bot-management cookie (__cf_bm) as part of normal anti-abuse traffic; I don't read it or use it for anything.

Email me. I'll delete it.

Email [email protected] with the subject line "Privacy request" and one of:

• Delete my data. I'll remove your submission within seven days and reply to confirm.
• Show me what you have. I'll send back the row, in plain text, within seven days.
• Correct my data. Tell me what to change.

If you're in the EU/UK, these requests are your rights under GDPR. Honoring them is the policy here regardless of where you live.

When this page changes, the date at the top changes.

No silent rewrites. If the practice changes, this page changes, and the "Last updated" date at the top of the page changes with it.