Privacy policy.

For privacy questions or requests, email hello@develop-ed.com.

Only what the contact form asks for:

• name and email — required, so I know who to reply to
• message — required; whatever you choose to tell me about your project
• timeframe, budget, and how you heard about me — optional dropdowns that help me prepare a useful reply

No accounts, no uploads, no payment details. If you email me directly instead, I hold what your email contains — same rules apply.

No cookies — the site sets none, which is why there's no cookie banner. No analytics or visitor tracking. No ad pixels. No third-party fonts, scripts, or embeds — everything the page loads, including the contact form's endpoint, is served from this domain. Your browser makes no request to any other host, on any page, at any point. The one exception is a client opening their own project area, which lives on its own subdomain; see client areas below.

I use what you send to reply, to scope the work you're asking about, and — if we go ahead — to set up the engagement. Under the GDPR that rests on Article 6(1)(b) (steps taken at your request before entering a contract) and Article 6(1)(f) (my legitimate interest in running the business and answering inquiries). No profiling, no automated decisions, and your details never end up on a marketing list.

When you hit send, the form posts over HTTPS to this site's own endpoint — /api/contact on this domain. Your browser never contacts anyone else; there is no third-party form service in the page. The endpoint hands your message to Resend, an email-delivery provider that processes it on my behalf under a data-processing agreement, and it lands in my inbox. From there it lives in my mailbox as ordinary business correspondence — that mailbox is hosted by Google, so Google handles the message in the same way it handles any email sent to me. The site itself is served by Cloudflare (hosting and CDN), which processes standard technical data — IP addresses and request logs — to deliver pages securely. Those three are the only processors involved. Nobody else receives your data, and it is never sold.

If we're working together, I send you a code for the clients page. The code you type there goes to this site's own server, /api/clients on this domain, and nowhere else; it is checked, not stored, and this site still sets no cookie. A right code takes you to your project's own area on its own subdomain of develop-ed.com. That area sets one strictly necessary sign-in cookie: HttpOnly, used only to keep you signed in, and it expires after 30 days.

If we don't end up working together, I delete the thread within 24 months of our last exchange. If we do, our correspondence becomes part of the engagement records and is kept for as long as accounting and tax law require.

Under the GDPR you can ask for access to the data I hold about you, have it corrected or deleted, restrict or object to how it's used, and receive a copy in a portable format. One email to hello@develop-ed.com does it — no forms, no hoops. If you think I've handled your data badly, you can complain to Latvia's Data State Inspectorate (Datu valsts inspekcija, dvi.gov.lv) — though I'd appreciate the chance to fix it first.

If anything here changes — a new tool in the chain, a different retention period — this page and the date at the top change with it.