Privacy Policy

This policy explains what VisitingCTO collects when you visit visitingcto.com, why, and what we do with it.

The short version

This site is a set of static files. It stores nothing on your device — no cookies, and no local storage, session storage, or other browser storage either. It runs no advertising trackers and builds no profile of you. The only personal information we receive is what you type into the contact form and send us deliberately, plus the IP address that submission arrives from.

What we collect

Information you give us. If you submit the contact form, we receive the name, email address, message, and — if you choose to fill them in — the company name and phone number you entered. We use this solely to respond to your enquiry.

Your IP address, when you submit the form. The notification email we receive also records the IP address the submission came from, and that address is sent to Cloudflare as part of the automated check described under Spam protection below. We use it only to identify abuse of the form. Simply browsing the site does not record your IP address anywhere.

Analytics. We use Cloudflare Web Analytics to understand which pages are read. It is cookieless and does not fingerprint visitors or track them across other sites. It records aggregate page-level data such as page paths, referrers, and general country, not individuals.

Server logs. We do not keep access logs. The site is served as static files from a content delivery network, which handles your request in order to deliver the page, but we have request logging switched off and retain no record of individual visits.

Cookies and similar technologies

Privacy rules cover more than cookies. They apply to anything that stores information on your device or reads information already stored there — local storage, session storage, IndexedDB, cached identifiers, device fingerprinting, tracking pixels and the like.

We use none of them. Loading any page on this site leaves your browser storage completely empty: no cookies, no local or session storage, no IndexedDB, no service worker, no cached identifier. Nothing is written to your device, and nothing already on it is read.

That is why you are not asked to accept cookies. A consent banner exists to obtain permission for storage and tracking; there is none here to permit.

Two components involve a third party, and neither stores anything on your device in our testing:

• Cloudflare Web Analytics counts page views without cookies or fingerprinting.
• Cloudflare Turnstile runs the bot check on the contact page. It is designed to work without tracking cookies, and we have configured it in its no-clearance mode, which does not set a clearance cookie for the site. Turnstile is Cloudflare's software running in your browser, so its internal behaviour is documented by Cloudflare rather than by us.

What we do not do

• We do not set advertising or tracking cookies, or any other form of device storage.
• We do not fingerprint your device or track you across other websites.
• We do not sell or rent personal information.
• We do not share your enquiry with third parties for their own marketing.

Spam protection

The contact form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than an automated script. Turnstile receives technical signals from your browser in order to make that determination. It is designed to work without tracking cookies.

How enquiries are handled

Contact form submissions are transmitted over HTTPS and delivered to us by email through Amazon Simple Email Service. They are retained in our email systems for as long as needed to handle your enquiry and to keep a record of our correspondence.

Your choices

You can contact us at any time to ask what information we hold about you, to request a copy, or to ask us to delete it. Write to us using the address below and we will respond.

Because the site stores nothing on your device and tracks nobody, there is nothing to opt out of and no consent to withdraw. If your browser sends a Global Privacy Control or Do Not Track signal, the site's behaviour is the same either way — it was already not tracking you.

Where your information is processed

The site and the contact form run on Amazon Web Services in the United States (Oregon). Cloudflare's analytics and bot-check services operate across its global network. If you are writing to us from outside the United States, your enquiry will be processed there.

Changes to this policy

If this policy changes, the revised version will be posted on this page with an updated date at the top.

Contact

Questions about this policy, or about information we may hold about you, can be sent to privacy@visitingcto.com.