Privacy Policy

What this policy covers

This policy applies to vahzor.com and its pages. It does not cover the client portal at clients.vahzor.com, which is a separate application with its own terms, or any third-party website linked from here.

If Vahzor sends you a link to book a call, the booking calendar on that page is part of that portal, shown inside this site. What you enter in it goes to the portal and is handled under its terms, not stored by this site.

Information you provide

Two places on this site ask you for anything: the contact form, and the short questionnaire you answer when buying the homepage preview. When you submit the contact form, these are the fields sent:

• Your name and email address, both required, so a reply can reach you.
• Your phone number, optional, only if you choose to give one.
• The service you selected, or the description you typed if none of the listed services fit.
• What you write about what you need, required — it is the message itself.

That information is composed into an email and delivered to info@vahzor.com. It is not written to a database, and this website has no accounts and no login. Please do not send confidential or sensitive personal information through this form; it is ordinary email once it arrives.

Buying the homepage preview asks for your name, email address, business name, your current website if you have one, what the homepage should help visitors do, and anything else you want to add. Those answers are attached to your order at Stripe, which takes the payment in a form it serves inside this page; your card details go to Stripe and never to this site. Stripe’s script loads only when you reach the payment step, not when you read the page. When the payment completes, Stripe tells this site, which emails your answers to info@vahzor.com. This site keeps no copy of the order; the record is at Stripe, where it is kept with the payment under Stripe’s own retention.

Information collected automatically

Vercel Web Analytics. Always on, because it needs no consent: it is cookieless and does not assign a persistent visitor identifier. It records page views along with the referring site, the country the request came from, and the general class of device. It does not build a profile, and it cannot recognize you on a later visit or on another website.

Google Analytics, with cookies only if you accept. Every page loads the Google Analytics script, using Google’s consent mode. The first time you visit, a banner asks whether Vahzor may use analytics cookies. Until you press Accept, Google Analytics sets no cookies and stores nothing in your browser: it sends Google only a cookieless notice of each page view (the page, how you arrived, and your device and browser), with no identifier that lasts beyond that page, which Google uses to estimate visits in aggregate. If you accept, it also records how long you stay and what you scroll to, and it sets the cookies listed below so it can tell a returning visit from a new one. Either way, the site tells Google not to use this data for advertising or personalized ads, and loading the script sends Google the ordinary request details, including your IP address. Google states that Google Analytics does not log or store IP addresses. What Google does with the data is governed by Google’s Privacy Policy and how Google uses information from sites that use its services.

Google’s preferred-source button. Blog articles, and only blog articles, load a small button from Google (a script and a frame from news.google.com, with its styling and logo from gstatic.com) that lets you mark Vahzor as a preferred source in Google Search. Loading it sends Google the ordinary request details — your IP address, browser, and the page you are on — and if you are signed in to Google, Google may read its own cookies to show whether you have already added this site. What Google does with that is governed by Google’s Privacy Policy. The button does nothing unless you press it, your choice is stored with your Google account rather than here, and this site receives nothing from it. It and Google Analytics are the only scripts on this site that come from a third party.

Server requests. Like any website, requests reach the host with an IP address and browser user-agent attached. Those are handled by the hosting provider as part of delivering the page.

Abuse prevention. When the contact form is submitted, the request’s IP address is used to limit how many messages can be sent from one address in an hour. It is held only in the running server’s memory, is not written to storage, is not included in the email, and disappears when that server instance restarts.

Cookies and browser storage

This is everything this site stores in your browser, and when:

_ga and _ga_G7V65NFGZJ

Google Analytics cookies, only after you accept. They let Google Analytics tell a returning visit from a new one on this site, and last up to two years. Declining afterwards deletes them.

vahzor:analytics-consent

Your answer to the banner, in local storage. Whether you accepted or declined, and when, so the banner does not ask on every page. It is asked again after twelve months. It is never sent anywhere.

To change your answer, use “Cookie settings” at the foot of any page. Your browser’s settings can also block or clear cookies and storage for this site at any time.

What this site does not do

These are stated plainly because they are the questions worth asking of any site, and because each one is a deliberate choice in how this one was built:

• No cookies without your consent, and nothing stored in your browser beyond the three items listed above. Google’s button on blog articles may read Google’s own cookies, as described above; it sets nothing for Vahzor.
• No advertising networks, retargeting pixels, or social media tracking scripts.
• No tracking across other websites, and no recognizing you from one visit to the next unless you accept analytics.
• No fonts or other assets loaded from third-party servers as you browse, with three exceptions described above: the Google button on blog articles, the Google Analytics script, and Stripe’s payment form when you buy the preview. The typefaces are served from this site’s own domain, so reading a page sends no request to a font provider.
• No sale, rental, or trade of information, and no sharing for anyone else’s marketing.

Service providers

Running this site involves four companies, each limited to the jobs listed:

Vercel

Website hosting and privacy-friendly analytics. Page requests, including IP address, and the aggregate analytics described below.

Resend

Email delivery for the contact form and for preview orders. The contents of an inquiry you submit, or the answers from a preview order, so they can be delivered as an email.

Stripe

Payment for the homepage preview. Your card details, entered in Stripe's own payment form and never seen by this site, along with your name, email address and your questionnaire answers, which Stripe keeps with the order.

Google

Google Analytics (with cookies only if you accept) and the preferred-source button on blog articles. For analytics: the pages you view on this site, how you arrived, and your device and browser, counted without cookies unless you accept, and then under a cookie identifier; never used for advertising. For the button: the ordinary request details when a blog article loads it, and your choice if you press it, kept with your Google account.

Information may also be disclosed where the law requires it, or where it is necessary to protect the rights, safety, or property of Vahzor or others.

How long information is kept

An inquiry you send becomes an email, and that email is kept for as long as it remains useful for correspondence and business records. Delivery logs are kept by the email provider under its own retention schedule. Vercel’s analytics data is aggregate and is retained by the hosting provider under its schedule; because it carries no identifier, it cannot be traced back to you. If you accepted Google Analytics, the data tied to its cookie identifier is kept by Google for no longer than fourteen months, the longest a standard Google Analytics property allows; aggregate reports may be kept longer.

If you would like the email you sent deleted, write to info@vahzor.com and it will be removed from the mailbox.

Your choices

Analytics cookies are your choice: accept or decline them in the banner, and change your answer at any time from “Cookie settings” at the foot of every page. Declining after accepting deletes the Google Analytics cookies straight away and returns it to cookieless counting. To stop the script loading at all, a browser content blocker or Google’s opt-out add-on will do it. This site keeps no accounts, so the only other information tied to you is what you chose to send. You may ask what was received, ask for a correction, or ask for it to be deleted, by writing to info@vahzor.com.

Depending on where you live, you may have additional rights over personal information under state or national privacy law, including the right to access, correct, or delete it, and the right not to be discriminated against for exercising those rights. Requests are handled the same way for everyone who asks, regardless of whether a particular law applies.

Security

This site is served over an encrypted connection, and the credentials used to send email are held as deployment environment settings rather than in the site’s code. No method of transmitting information over the internet is completely secure, and no one can honestly promise otherwise.

Children

This site offers professional services to businesses and organizations. It is not directed to children, and information is not knowingly collected from anyone under 13.

Changes to this policy

If this policy changes, the effective date at the top of the page changes with it. Material changes will be reflected here rather than announced individually.

Contact

Questions about this policy, or about anything on this page, can go to info@vahzor.com.

See also the Terms of Use.