Privacy & security

Your details, in plain words

Last updated October 2026

The short version: I collect only what's needed to build and deliver your website, I never sell it, this site has no cookies or trackers, and one email is enough to opt out or have your details deleted.

What I collect

  • From the concept request form: your business name, type of business, town and state, your current website (if you give one) and your email address. Nothing else.
  • From public sources: for businesses I contact first, the public map listing (OpenStreetMap) and the business's own public website: name, category, address, phone, opening hours and contact email.
  • From you, if you go ahead: the details and photos you email me for your site, and your replies.
  • Payments: handled entirely by Stripe. I see that a payment was made and the amount; I never see or store card numbers.

This website sets no cookies and runs no analytics, ads or tracking scripts. Its fonts, scripts and styles are all served from this site, so visiting it doesn't send your details to other companies. The “try it” preview on the homepage runs entirely in your browser; nothing typed there is sent anywhere.

Why

To build your homepage concept, email it to you (with at most one follow-up), answer your replies, and, if you buy, finish, host and look after your site. That's all. Your details are never sold, rented or used for advertising.

How it's protected

  • The whole site is served over HTTPS (encrypted), with strict security headers: a Content-Security-Policy that blocks outside scripts, no framing by other sites, and HTTPS enforced on every visit.
  • The form only accepts submissions from this site. Every field is checked on the server, and automated or repeated submissions are rejected.
  • A request waits in a private queue at my hosting provider (Cloudflare), which encrypts it at rest, until my system collects it, usually within a couple of hours. Anything not collected is deleted automatically after 14 days.
  • Your IP address is never stored with your request. Rate limiting uses a one-way hash of it that expires within a day.
  • Replies to your emails are handled by a system that only deals with your website and the offer; anything unusual is held for me to read personally.

Who else handles it

Only the services needed to run the studio, each for its own part:

  • Cloudflare: hosts this site, concept pages and finished sites.
  • Google Workspace: my email inbox.
  • Stripe: payments, if you buy.
  • Anthropic: an AI model that helps write the wording of concepts and routine replies from your business's details.
  • Pexels / Openverse: stock photo search (only search words like “bakery” are sent).

How long it's kept

Concept pages for businesses that never reply are taken offline after about 45 days. If you opt out, your email address (and your business's own domain) goes on a do-not-contact list so you're never emailed again. If you buy, your details are kept for as long as I host your site and as tax records require. To have your details deleted sooner, just ask (below).

Your choices

  • Stop emails: reply “no” or “unsubscribe” to any email. It takes effect immediately.
  • See, correct or delete your details: email [email protected]. Requests like this are always handled by me personally.

Security issues

Found a security problem with this site? Please email [email protected] (see also security.txt).

Contact

Maple Lane Web · Kameron Roberson · [email protected]

This site isn't directed at children, and I don't knowingly collect children's information.