Privacy Policy
How we handle data on our website and in our business operations.
Website Analytics
This website does not use third-party analytics or tracking scripts. We do not collect behavioral data, build user profiles, or track visitors across pages. Standard web server logs (CloudFront access logs) may be retained for operational and security purposes.
Minimal Cookies
This website does not set any first-party cookies. The only cookies that may be set come from Cloudflare Turnstile, our bot-protection widget on the contact page. These are strictly functional cookies used to complete the security challenge — they are not used for tracking, advertising, or analytics.
Contact Form Data
Our contact form uses Cloudflare Turnstile to verify that submissions come from real people. When you submit the form, your name, email, and message are transmitted via Amazon SES to our email inbox. The form data is not stored in any database, CRM, or marketing platform.
AWS CloudWatch retains Lambda execution logs (request metadata and timestamps — not message content) for operational monitoring. AWS SES retains delivery metadata (recipient address, delivery status, timestamps) as part of standard email service operations. Neither system stores the content of your message.
Third-Party Services
We use only the following third-party services:
- AWS (CloudFront + SES) — Static site hosting and email delivery for the contact form.
- Cloudflare Turnstile — Bot protection on the contact form. See Cloudflare's privacy policy.
Data Sharing
We do not sell, rent, trade, or share your personal information with any third party for marketing or advertising purposes. Information may be shared with government customers as required by contract or regulation.
Your Rights
If you have contacted us and wish for your correspondence to be deleted, email us and we will purge it promptly.
Contact
Questions about this policy? Email us at contact@citruscs.com.
Last updated: March 2026