NOContact

DRAFT · COMPLETE BEFORE LAUNCH

Privacy — preview draft

This draft describes the current implementation. It needs to be completed and reviewed before public launch.

What we collect

The contact form stores name, email, selected service and message. Interest forms store the information displayed in each form. Website and portfolio URLs are optional.

Purpose

Enquiries help us understand and follow up requests. Interest registrations are reviewed for future services or collaborations. No newsletters or promotional email campaigns are enabled.

Storage and access

Forms are stored in Cloudflare D1 through Vercel. Uploaded portfolio images are stored in Cloudflare R2. Private records are accessible only to the authorised administrator. Administrator sign-in uses GitHub.

Technical data

Your language choice is stored in browser local storage and a functional language cookie. Administrator sign-in uses a signed session cookie and a temporary OAuth cookie. Spam protection uses a temporary hash of a network identifier and a ten-minute window. Raw IP addresses are not stored in the form database. No analytics or advertising pixels are installed.

Your rights

You can request access, correction or deletion. The contact point and responsible business must be added before launch. Information about complaints to Datatilsynet and full rights details must be included in the final notice.

Decisions needed before launch

Legal business name, registration number and privacy contact; legal basis for each purpose; retention periods and deletion procedures; processor agreements, storage regions and any transfers; complete cookie and rights information. Automatic deletion of form submissions is not configured yet.