Privacy

The contact form collects the name, email address, and message you type in. Your network address is not recorded or stored: the Worker that sends the message reads it for a moment, to count how many messages come from the same address in a minute, so it can slow down a flood. This site’s own code never writes it into the message and never stores it. Cloudflare, which hosts the site, keeps short-lived technical logs of the requests it serves. The form also carries a hidden field a person never sees and a timestamp of when it was opened, both used to judge whether a message is spam; a plain note about the timing may go into that same email, and neither is stored anywhere.

When you submit the form, it is emailed to Brandt Hatten. Nothing is stored beyond that email. It is never sold, and never shared with anyone outside running this business.

When you pay an invoice through the link I send you — whether it covers a design fee, starts a care plan, or both — that payment happens through Stripe Checkout. Card numbers are typed on Stripe’s own page — they never reach this site, and nothing here sees or stores them. Stripe publishes its own privacy notice at stripe.com/privacy, and it applies to the payment itself.

Stripe charges a care plan every month. If a monthly charge fails, Stripe sends this site the failed invoice, and I get an email with your name, your email address, the amount due, the care plan when it’s known, the invoice number, a link to pay it, and a link to the invoice in Stripe’s dashboard. If a care plan ends instead, Stripe sends the subscription, with no name or email attached, and I get an email naming the plan, the reason it ended, any comment Stripe recorded, the invoice that started the plan, when it ended, the Stripe customer id, and a link to the subscription in Stripe’s dashboard. Either way, this site sends one email for each notice and stores none of it.

An invoice I send you is stored in this site’s own database, on Cloudflare: the client name and email you gave me, the line items and amounts on the invoice, and whether it’s open, paid, or void. Card details are never part of that record — they go only to Stripe, as above.

If someone tries and fails to sign in to the owner’s private admin page, the site keeps the email address typed and the network address for a short time, to lock out password guessing, and then deletes them. Visitors never need that page.

This site doesn’t add any analytics of its own. On the public pages, the only scripts running are the ones built into the site itself: the motion on the home page, and a timestamp check on the contact form that helps catch spam. The owner’s sign-in page runs its own script, described above.

Cloudflare, which hosts this site, runs its own edge scripts and a Web Analytics beacon on every site on its Free plan. That’s part of the hosting and can’t be turned off from this site.

To have a submission deleted, email info@brandthatten.dev and it will be removed.