privacy · last updated 2026-09-25
Privacy notice.
This site is a static set of pages. It collects what you type into the contact form and nothing else. Every third party that can see your data is named below, with a link to its own notice and the one reason it is there.
What this site collects and why
When you send the contact form, I receive the fields you filled in: your name, your email address, your message, and the offer or brief you attached to it if you came from the pricing or start pages. I use them to reply to you and for nothing else.
That is the whole list. The pages themselves do not collect anything. There are no cookies, no tracking pixels, no fingerprinting, and no advertising scripts. Your currency choice and the scoper brief are kept in your own browser only, and they never leave it unless you send them to me.
If a cookieless analytics beacon is enabled, it counts page views without cookies and without identifying you. Whichever one is active is named in the processors table below; if none is listed there, none is running.
Processors
These are the only companies that can handle data from this site, and each one only does so when you take the action named next to it.
| processor | purpose | role | when |
|---|---|---|---|
| Stripe | Card payments for the fixed-price offers and monthly plans | Independent controller for payment data | Only when you open a Stripe checkout window. Card details go to Stripe, never to this site. |
| Web3Forms or Formspree | Delivers the contact form to my inbox | Processor | Only when you send the form, and only if form delivery is enabled. Otherwise the form opens your own email client. |
| Cal.com or Calendly | Booking the 20-minute call | Independent controller for the booking | Only when you open the booking window. Until then no script from either is loaded. |
| WhatsApp / Meta | Messaging, if you prefer it to email | Independent controller | Only if you choose to message via WhatsApp. The link opens the WhatsApp app or site; nothing is sent from here. |
| Cloudflare Web Analytics, Plausible or Umami | Cookieless page-view counts | Processor | Only if enabled, and only one of the three at a time. No cookies, no cross-site identifiers. |
The site hosting provider sees standard server logs (IP address, requested page, time) for as long as it keeps them; that is true of every website and is not something this site adds to.
Cookies
This site sets none. It has no consent banner because there is nothing to consent to. When you open a Stripe, Cal.com, Calendly or WhatsApp window, that window belongs to them and they set their own cookies under their own notice, linked above.
Retention
Enquiries are kept for 24 months from the last message in the thread, then deleted. If an enquiry turns into work, the contract, invoices and the correspondence needed to support them are kept for the period the law requires, then deleted.
Your rights
You can ask me at any time to
- see the data I hold about you (access),
- correct it,
- delete it,
- stop using it for a particular purpose (objection),
- send it to you or to someone else in a portable format.
Write to the data contact below and I will answer within one month. If you think I have handled your data badly, you can complain to the supervisory authority where you live; I would rather hear from you first so I can fix it.
Children
This site sells engineering services to businesses and is not aimed at anyone under 16. I do not knowingly collect data from children. If you believe a child has sent me something, write to the address below and I will delete it.
Changes
If I add or remove a processor, or change what is collected, this page is updated and the date at the top changes. I do not send notice of changes by email; the date is the record.
Contact
Data contact: hello@onebit-ai.com
Under POPIA the responsible party for this site is . Requests under POPIA go to the same data contact above.
Anything else about how this site works is answered on the contact page.