How your data is handled.
Plain English, no boilerplate. Here is what happens to anything you send through the contact form, and what doesn’t happen to it.
Last updated 27 July 2026.
Who this is
This site belongs to Tom Mackellar, working as an individual and not a registered company. There is no company number or registered business address to publish here, because there isn’t one.
What’s collected
What you type into the contact form yourself: your name, email address, project details, and (if you choose to share them) a timeline, budget range and whether the product is public yet. Two things get stored alongside it automatically, and you should know about both: your browser’s user-agent string is saved with the message, and your IP address is held for 60 seconds to stop bots submitting the form repeatedly. There is no analytics, no advertising, and no tracking of how you move around this site. Two things do happen automatically and you should know about them: the typeface loads from Google Fonts, which means Google receives your IP address as the page renders, and the contact page loads Cloudflare Turnstile to keep bots out, which stores a token in your browser for that purpose.
Why it’s collected
Solely to read your enquiry and reply to it. Nothing you submit is used for anything else. No mailing list, no marketing, no analysis beyond replying to you.
How it’s stored
Submissions are stored in Cloudflare KV, a data-storage service run by Cloudflare, and a copy is emailed to Tom through Resend, an email-delivery service. Those two companies, plus Google Fonts and Cloudflare Turnstile as described above, are the only third parties involved, and they process this data to provide those services and nothing else. Nobody buys your details, and nothing is sold, shared or passed on for marketing.
How long it’s kept
Only as long as it takes to respond to your enquiry and follow up on the project. Never indefinitely. Ask and it gets deleted, see below.
Your rights
Email [email protected] any time to ask what’s held about you, correct it, or have it deleted. Requests like this are handled personally, by Tom, promptly.
Cookies & tracking
No tracking, analytics or advertising cookies of any kind, which is why there is no consent banner. One exception is worth naming: Cloudflare Turnstile, the anti-bot check on the contact page, stores a token in your browser while it verifies you are a person. It is strictly necessary for that form to work and it is not used to follow you anywhere.
Anything not covered here? Get in touch