Privacy Policy

No Tracking or Analytics

This website does not use Google Analytics, Facebook pixels, hotjar, or any other third-party tracking scripts. We do not collect behavioral data, build user profiles, or track you across pages. There are zero third-party analytics requests made by this site.

Minimal Cookies

This website does not set any first-party cookies. The only cookies that may be set come from Cloudflare Turnstile, our bot-protection widget on the contact page. These are strictly functional cookies used to complete the security challenge — they are not used for tracking, advertising, or analytics.

Contact Form Data

Our contact form uses Cloudflare Turnstile to verify that submissions come from real people, not bots. When you complete the Turnstile challenge, Cloudflare may process your IP address and browser metadata to issue a verification token. No personal information from the form is sent to Cloudflare.

When you submit the form, your name, email, and message are transmitted via Amazon SES to our Proton Mail inbox. The form data is not stored in any database, CRM, or marketing platform. It exists only as an email in our encrypted mailbox and is deleted after your inquiry is resolved.

AWS CloudWatch retains Lambda execution logs (request metadata and timestamps — not message content) for operational monitoring. AWS SES retains delivery metadata (recipient address, delivery status, timestamps) as part of standard email service operations. Neither system stores the content of your message.

Third-Party Services

We use only the following third-party services:

• AWS (CloudFront + SES) — Static site hosting and email delivery for the contact form.
• Cloudflare Turnstile — Bot protection on the contact form. Processes IP address and browser metadata to verify human visitors. See Cloudflare's privacy policy.
• Proton Mail — Encrypted email provider where contact form submissions are delivered.

No advertising networks, social media embeds, CDN-hosted fonts, or analytics services are loaded on any page.

No Data Sales

We do not sell, rent, trade, or share your personal information with any third party for any reason. Period.

Your Rights

Since we collect virtually no data, there is little to request deletion of. However, if you have contacted us and wish for your correspondence to be deleted, email us and we will purge it promptly.

Contact

Questions about this policy? Email us at contact@citruscs.com.