Privacy Policy
Last updated: 3 November 2026
ScienceForge Digital (“we”) builds websites and software for small businesses in Del Rio, Texas and beyond. This policy explains, in plain language, what information we handle on this website and how we protect it. We collect as little as possible.
The short version: We don’t sell your data. The live visitor map only runs if you opt in, shows your city at most, and never stores or shares your IP address or exact location. You can opt out and remove your dot at any time.
1. The live visitor map
Our home page can show an interactive globe with glowing dots marking the cities people are visiting from. This feature is off by default and only activates for you if you click “Show my city.”
What we collect (only after you consent)
- Your city and country, determined by our hosting provider (Cloudflare) from your network connection.
- An approximate location rounded to the nearest ~11 km (city level) — never your precise coordinates, street, or address.
- A random, anonymous token stored in your browser so that you can remove your own dot. It is not linked to your name, email, or any identity.
What we never do
- We never store your IP address. It is used momentarily by the hosting edge to look up your city, then discarded — it is never written to our records or shown to anyone.
- We never store precise coordinates, device identifiers, names, or any personal identifier.
- We never show one specific person — dots are aggregated by city, and locations are rounded.
How long we keep it
Map data is ephemeral. Each contribution automatically expires after a short window (about 15 minutes) and is deleted. We keep nothing long-term.
Your choices
- Consent first: nothing is collected until you choose “Show my city.”
- Opt out / remove me: use “Manage / opt out” beneath the globe to stop sharing and delete your dot immediately.
- Do Not Track: if your browser sends a Do Not Track signal, the map defaults to off.
Who processes this data
Location lookup and storage happen on Cloudflare, our hosting provider, within their network. We don’t send this data to advertisers or third-party trackers. Our legal basis is your consent, which you can withdraw at any time.
2. The contact form
When you send us a project enquiry, we receive and store what you choose to provide: your name, email address, the service you are interested in, and your project details. We keep this in a private inbox that only the site owner can open, together with our replies to you and any private notes we make about your enquiry. We use it only to respond to you and to manage your project, and we don’t sell it or use it for advertising. Please don’t include sensitive information (financial details, government IDs, passwords) in the form.
To run the form we use a few service providers who process data on our behalf: a database provider (Supabase) to store enquiries, Cloudflare (hosting and a spam-protection check called Turnstile) to keep automated spam out, and an email delivery provider to send you our replies. We keep enquiries for as long as they are needed to deal with your request, and you can ask us to delete yours at any time.
3. Cookies & local storage
We don’t use advertising or tracking cookies. The site stores a couple of small values in your browser (such as your visitor-map choice and the anonymous removal token) purely to remember your preferences on your device. Clearing your browser storage removes them.
4. Security
The site is served over HTTPS. Any keys or secrets live only on the server, never in the page. Visitor-map data is stored as anonymized, aggregated city counts with automatic expiry.
5. Children
This site is intended for businesses and is not directed at children under 13.
6. Changes
We’ll update this page if the site’s data practices change, and revise the date above.
7. Contact
Questions, or want your data removed? Send us a message through the contact form and tell us what you would like removed.
Note for the site owner: this is a plain-language starter policy. Before launch, review it against your actual practices and the laws that apply to your customers (e.g. GDPR/CCPA), and have it checked by a qualified professional. Confirm the data window matches your deployed settings.