Privacy Policy

What this policy covers

This policy covers this website — handcrafted.solutions. It explains what the site collects, why, and who else sees it.

It does not cover the work itself. Once you hire us, whatever you share during a site survey, an installation, or a service call — floor plans, camera placements, gate codes, network details, billing — isn’t covered by this policy. That’s part of the work we do for you.

The short version

• This site is a set of pages and one contact form. No accounts, no logins, no database.
• No analytics. No tag manager. No advertising pixels. No session recording. We don’t profile visitors and we don’t track you across other sites.
• This site sets no cookies.
• We don’t sell your information, and we don’t share it for advertising.
• Our Contact page uses Cloudflare’s invisible spam check — opening that page shows Cloudflare your IP address, whether or not you submit anything. No other page on this site contacts anyone but us.
• If you fill out the contact form, it becomes an email in our inbox. That’s the whole story.

What we collect

The contact form. It asks for six things, and it won’t send until you’ve filled in all of them:

• your name
• your email address
• your phone number
• the service you’re interested in
• your property type
• your message

That’s what reaches us. Nothing else on this site asks you for anything.

Two anti-spam values. The form also sends a hidden field that a real person never sees or fills in, and a timestamp of when the form loaded in your browser (so we can spot submissions sent faster than a human could type). Both are used only to decide whether a submission is genuine. Neither is stored, and neither is passed on to anyone. If either says “bot,” we throw the entire submission away and no email is sent.

Your IP address. When you submit the form, our server passes your IP address to Cloudflare — where our host provides it — so Cloudflare can run its anti-spam check. We don’t store it, we don’t log it, and it is not in the email we receive. Cloudflare also sees your IP simply because you opened the Contact page — more on that below.

Nothing else. No newsletter signup. No file uploads. No location, camera, or microphone — the site turns those browser features off outright and never asks for them.

Why we collect it

To answer you. That’s it. We use what you send to reply to your request, and if you want the work, to quote it and schedule it.

Submitting the form does not put you on a mailing list. This website has no mailing list, and it sends you no automated email — not even a confirmation. The only email your submission creates is the one that lands in our inbox.

Where your submission goes

When you press send:

1. Cloudflare checks you’re a person. This sends a challenge token to Cloudflare, along with your IP address where our host provides it.
2. If our spam checks fail, we discard it. It goes no further. No email is sent, and we contact nobody.
3. If it passes, we email it to ourselves. Our server hands it to Microsoft’s Graph API, which sends it from our website mailbox (website@handcrafted.solutions) to contact@handcrafted.solutions — an address on that same mailbox. Your name, email, phone, property type, service and message are in that email. Your email address is set as the reply-to, so when we answer, the reply goes straight to you. There is no CC and no BCC.

A copy is also kept in that mailbox’s Sent Items. The website itself keeps nothing — there’s no database to keep it in.

Who else is involved

Three services touch this site. Here’s each one, and why.

Cloudflare — spam protection, Contact page only

Our contact form uses Cloudflare Turnstile, an anti-bot check that usually runs invisibly; you’d only see a challenge if Cloudflare thinks something’s off. Two things worth knowing:

• Just opening the Contact page loads Turnstile from Cloudflare (challenges.cloudflare.com). Your browser connects to Cloudflare directly, so Cloudflare receives your IP address whether or not you ever submit the form.
• When you submit the form, our server also sends your IP address to Cloudflare to validate the check, where our host provides it.

This happens on the Contact page and nowhere else. No other page on this site contacts Cloudflare.

Cloudflare says Turnstile processes signals such as your IP address, TLS fingerprint, and browser user-agent, and that its purpose “is not to identify, profile or target any individuals but solely to detect and block bots.” It’s spam protection — not analytics, not advertising. See Cloudflare’s Turnstile Privacy Addendum.

Microsoft — email delivery and storage

We use Microsoft’s Graph API to send contact form submissions to our own inbox, and Microsoft 365 to hold and read that email. The details you submitted are in the message Microsoft delivers and stores. See the Microsoft Privacy Statement.

Microsoft Azure — hosting

This site runs on Azure Static Web Apps. Like any web host, Microsoft’s servers receive what your browser sends to fetch a page: your IP address, your browser’s user-agent, and the page you asked for. That’s how the page reaches you.

We have not turned on request logging of any kind. That’s a choice, not a limitation — it means we do not collect, review, or keep your IP address or any record of your browsing here. What Microsoft keeps in its own platform logs, and for how long, is Microsoft’s to answer, not ours; we can’t access it and can’t control it. Same Microsoft Privacy Statement.

That’s the entire list. No analytics service. No tag manager. No ad network. No data broker. No error-tracking or session-recording tool. No social media pixel. Our fonts and icons are served from our own domain, not from Google Fonts or any other content network — so reading this site doesn’t announce your visit to Google, Facebook, or an advertiser.

No third party uses this site to build advertising profiles or track you across other websites. Cloudflare processes bot-detection signals when you open the Contact page; it states these are used solely to detect and block bots, and that it also uses them to improve Turnstile itself.

Links out. We link to our Google reviews, our Facebook page, and our LinkedIn page. They’re ordinary links — nothing loads from those companies unless you click. Clicking the reviews link sends them no referrer at all. Clicking Facebook or LinkedIn tells them you came from handcrafted.solutions, but not which page you were on.

Cookies

This site sets no cookies. Not one — not for analytics, not for advertising, not for sessions. There’s no cookie banner because there’s nothing here to consent to.

Two honest footnotes, because “no cookies” isn’t the same as “nothing on your device”:

• Your theme preference. The site saves one item in your browser’s local storage, under the key nuxt-color-mode, holding the display theme. It’s written automatically when a page loads. It holds no identifier and no personal information, it’s never sent to us or anyone else, and it isn’t used to track you. Clearing this site’s data removes it.
• Reload recovery. If a page fails to load properly, or you leave a tab open across a site update, the site briefly writes nuxt:reload and nuxt:reload:state entries to your browser’s session storage so it can reload cleanly. They hold a page path, a timestamp, and — when recovering across a site update — the page’s own render state. Your browser discards them when you close the tab.

Cloudflare Turnstile sets no cookies on this site and stores nothing in your browser under our domain — we checked, including after it had completed a verification. What Cloudflare does on its own domain is covered by its Turnstile Privacy Addendum.

How long we keep it

The website keeps nothing. Once your submission is emailed, the site has no copy — there’s no database and no log.

The email is a different matter, and we’re not going to pretend otherwise. Your inquiry sits in our Microsoft 365 mailbox as ordinary business correspondence — the delivered message, plus the copy in Sent Items — and we keep it as long as we need it to answer you, quote the work, and support the job afterward. We’re not going to invent a number of days here that we don’t actually enforce.

If you want your inquiry deleted, ask us. We’ll delete it from our mailbox.

Your choices

There isn’t much to choose from, which is the point.

• Don’t want to use the form? Call 801-876-6300 or email contact@handcrafted.solutions. Same people, same inbox.
• Want your inquiry corrected or deleted? Email contact@handcrafted.solutions or call 801-876-6300 and tell us. We’ll fix it or delete the email. You don’t have to give a reason.
• Don’t want to hear from us again? Say so, and we’ll stop.
• Want the theme preference off your device? Clear this site’s data in your browser.
• Do Not Track. Your browser may send a Do Not Track signal. We don’t respond to it — because we don’t track you in the first place. There’s nothing here to switch off.

Security

• No accounts, no passwords, no customer records stored on this website. There’s no database here to breach.
• Every page is served over HTTPS.
• The site can’t reach your camera, microphone, or location. We’ve disabled those browser features for this site, and nothing on it asks for them.
• Your inquiry lives as email in our Microsoft 365 tenant, protected by Microsoft’s infrastructure and our own account controls.
• The credentials the site uses to send that email are stored as protected settings on our host — never in the code, never in the pages we send to your browser.

No website can promise perfect security, and we won’t. What we can say is that we kept the attack surface small on purpose. The less we hold, the less there is to lose.

Children

This site is for property managers, HOA boards, and business owners hiring low-voltage security and networking work. It isn’t directed at children and holds nothing of interest to them. We don’t ask anyone’s age, and we don’t knowingly collect information from anyone under 13. If we learn we’ve received a child’s information through the form, we’ll delete it.

Changes to this policy

If we change this policy, we’ll post the new version on this page and update the effective date at the top. If a change materially affects how we handle your information, we’ll say so here plainly rather than quietly swapping the text.

Contact us

Questions about this policy, or about anything we hold on you:

We’d rather you asked than wondered.