Privacy policy

Just visiting

You don’t need an account to browse this site, and there isn’t one to create. We don’t run advertising, and the site itself doesn’t set cookies or store anything in your browser. Vercel Analytics gives us aggregate counts of page views and referrers; it doesn’t use cookies, doesn’t track you across other sites, and doesn’t identify you personally.

Like any website, our hosting provider, Vercel, automatically handles technical information when your browser loads a page, such as your IP address, browser type and the page requested, and may keep it in server logs.

If you send a project request

The request form collects what you type into it:

• your name and email address (required);
• your company or organization, and how you found us (optional);
• a description of the idea and who will use it;
• links to sites you like, with a note about each (optional);
• the features you tick, anything else you add, and your budget and timeline ranges (optional).

We use this only to read your request and reply to you. We also run an automatic check on each submission (for example, how many links it contains and how quickly it was sent) to filter out spam. Requests that look like spam are saved but marked as spam and are not emailed to us.

To limit abuse, the form also keeps a one-way hash of your IP address, not the address itself, together with a running count of recent submissions. We use it only to slow down floods of requests, it can’t be turned back into your address, and it is deleted automatically after a few days.

Your request is saved in our database and emailed to us so we can reply. Please don’t include anything you wouldn’t want us to read, such as passwords or payment details.

Services that process data for us

• Vercel hosts the website and receives the request when you send the form.
• Neon hosts the database where your request is stored.
• Resend sends us the email notification containing your request, with your email address as the reply address.
• Cloudflare Turnstile is a bot check we can switch on to protect the form. When it is on, your browser loads a script from Cloudflare and Cloudflare sees your IP address and browser details; with your submission we also send Cloudflare the check’s response token and your IP address to confirm you are not a bot. Cloudflare may use its own cookies or storage for this.

These providers may process data in the United States or other countries. We share data with them only to run this site and handle your request. We don’t sell personal information or use it for advertising.

How long we keep it

Requests stay in our database until we delete them. Nothing on the site deletes them automatically, so they are kept until we choose to remove them or you ask us to. Copies in our email inbox are kept until we delete them.

Your choices

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing hello@cappstudio.app. If you’re in Canada, you have these rights under the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA). If you’re unhappy with how we’ve handled your information, you can also contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.

Children

The request form is for business enquiries and this site is not intended for anyone under 18. We don’t knowingly collect personal information from children. If you think a child has sent us something, email us and we’ll delete it.

Changes and contact

If we change how we handle information, we’ll update this page and the date at the top. Questions: hello@cappstudio.app.