SITE INFORMATION / PRIVACY POLICY
Privacy Policy
What this website processes when you read, calculate, save a privacy choice, or send a contact message.
Scope and operator
This policy describes the current site implementation, not a general promise about future products. It is an educational publication with static pages, browser-side tools, and a PHP contact endpoint. The publisher does not have account sign-in, a calculator database, advertising tags, or analytics tags configured.
Visiting the pages
The web host receives the requests needed to serve pages and assets. The host or its Apache/PHP configuration may create technical logs containing information such as an IP address, user agent, requested URL, timestamp, response status, referrer, and request headers the host chooses to log (a browser may include Sec-GPC: 1). Which fields are recorded, who can access them, whether other host services process them, and how long they remain are controlled by the deployed host. This site code does not set a log-retention period.
Contact form
The form asks for name, email, topic, and message. It also carries a hidden cross-site request forgery (CSRF) token and an empty honeypot field; those are security controls, not additional profile questions. The page requests a CSRF token from csrf.php. PHP holds that token and a recent-success timestamp in a server-side session. A first-party PHP session cookie is used to connect the browser to that session. The cookie is created only when the contact form requests its token; its configured lifetime is the browser session, path is /, HttpOnly and SameSite=Strict are set, and Secure is set when PHP sees HTTPS. PHP session-file retention is host-configured and is not set by this site.
Email delivery and copies
After server-side checks, a valid message is passed to PHP mail() for the recipient configured in config/site.php. The message body contains the submitted name, email, topic, and message; the sender header uses the configured From address and the visitor email is used for Reply-To. The application does not write submissions to a site database or application log. PHP mail() acceptance is not proof of final delivery. The host mail transfer agent and recipient email provider may handle or retain messages under their own configuration and practices; their identities and retention settings are not specified here.
Calculator and privacy-choice data
Calculator inputs and results are calculated in page JavaScript. They are not sent to the server, placed in a form, or saved by this site. The privacy-choice page reads the browser’s navigator.globalPrivacyControl property and displays what it sees; that value is not transmitted by this page’s script. Its preference button writes a localStorage key in the current browser. The key remains until it is cleared in that browser; it is not sent to this site.
Third parties, tracking, and requests
No analytics, ad pixels, advertising scripts, external fonts, or optional tracking cookies are enabled in the site build. Following an external source link takes you to that publisher; its handling is governed by its own policy. This site has no configured sale or sharing of personal information for cross-context behavioral advertising. The privacy-choice interface is local-only and does not submit a statutory request or alter a server-side sale/share system.
Host facts and privacy requests
The deployment host, mail relay, server log settings, and session-storage retention are not specified by the site source. No deletion, access-request workflow, response time, or identity-verification process is implemented here. Applicability of particular privacy laws and rights depends on the actual publisher, audience, and data practices. The owner must supply the operator/contact details and make a suitable request process available before public launch.
Primary references
Effective October 11, 2026 · Last reviewed October 11, 2026