Privacy Policy

Effective date: October 4, 2026

This Privacy Policy describes how Canterlotus Digital Consultancy ("we", "us", or "our") collects, uses, and discloses information when you visit canterlotus.com (the "Site"), try the example sites hosted under it, or submit our request form. By using the Site, you agree to the practices described here.

Information We Collect

The Site is static and has no advertising or cross-site tracking. Apart from basic, cookieless traffic statistics (see Cookies & Tracking), we collect information only when you choose to give it to us:

• Request form: your name, email address, business name, the service you're interested in, and any message you write. Please do not include passwords, payment card numbers, or other sensitive information in the form.

We also handle a small amount of technical information to keep the form safe from abuse, described under Abuse Protection below. We do not have user accounts, comments, forums, or any other user-generated content on the Site.

How We Use It

Information submitted through the request form is used only to:

• Reply to your request and discuss the work you're asking about
• Keep a record of the engagement if we move forward together

Your request is delivered to us as a private message through Telegram, a third-party messaging service. The Site does not keep its own copy of your request in a database or send it by email. Telegram handles that message under its own privacy policy, and it may be processed on servers outside your country.

We do not sell, rent, or share your information with third parties for marketing purposes. We do not add you to a mailing list or drip email sequence from a single request-form submission.

Cookies & Tracking

We do not run advertising trackers on this Site: no ad pixels, no third-party behavioral tracking, and no Google Analytics.

We do use Cloudflare Web Analytics, a privacy-focused service, to see aggregate traffic: roughly how many people visit, which pages they open, where they came from (such as a search engine or another site), their country, and basic browser, device, and page-speed information. It does not use cookies or browser storage, and it does not build profiles of individual visitors or follow you across sites. It is governed by Cloudflare's privacy policy. We use these statistics only to understand how the Site is used and to improve it.

Apart from that, our hosting provider may set a strictly necessary technical cookie for bot protection and security (for example, Cloudflare's __cf_bm cookie). This does not track you across sites.

Abuse Protection

To stop spam and automated submissions, the request form uses two protections:

• Cloudflare Turnstile, a security check that runs when you open the form. It looks at technical signals from your browser to tell people from bots, and is governed by Cloudflare's privacy policy.
• Rate limits. When you submit the form, we keep a counter tied to a one-way, salted hash of your IP address (never the address itself) for up to 24 hours so that repeated submissions can be limited. We also look at the name of the network your connection comes from, only in the moment of the request and without storing it, so that repeat submissions from VPN and data-center networks can be limited more strictly than ordinary home and mobile connections.

Hosting & Infrastructure

The Site is hosted on Cloudflare. When you visit canterlotus.com, standard server-log data (IP address, request metadata) is processed to serve the page and protect against abuse. This is inherent to all web hosting and is governed by our host's own privacy policy.

The Site and the example sites load typefaces from Google Fonts, so your browser contacts Google's font servers and Google receives your IP address when such a page loads.

The example sites are demonstrations that run in your browser. Anything you type or click in them stays in your browser, and some may save a preference or demo state in your browser's local storage. None of it is sent to us.

Third-Party Links

The Site links to the live websites we host for clients, such as Plain Jane Sourdough, and to other third-party sites. Those sites have their own privacy policies. We are not responsible for the privacy practices of any third-party site you reach from a link on this Site.

Data Retention

We keep request-form messages and related correspondence for as long as reasonably necessary to respond to your request or, if we're engaged for work, for the duration of that engagement plus standard business record-keeping. You can ask us to delete your information at any time, see Contact below.

Children's Privacy

The Site is not directed at children under 13, and we do not knowingly collect information from children.

Your Rights

Depending on your jurisdiction (including GDPR in the EU/UK and CCPA in California), you may have the right to access, correct, or delete personal information we hold about you, or to object to its use. Send us a request through the form on the Site, say it is a privacy request, and we will respond within a reasonable time. Because requests arrive through Telegram, we can delete our copy of your message on request, but we cannot delete data held by Telegram itself.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

Contact

For privacy-related questions or requests, use the request form on canterlotus.com.