Privacy policy
Last updated .
The short version
We collect the information you type into the contact form, and nothing else. We use it to reply to you. We do not sell it, we do not share it for marketing, and we do not run advertising trackers on this site.
Who we are
Cibbster Designs, Lapeer, MI 48446, United States. For any privacy question, use our contact form and we will reply to the address you give us.
What we collect
Information you give us
When you submit the contact form we receive:
- Your first and last name
- Your email address
- Your phone number, if you choose to provide it
- The service you selected
- The project details you wrote
- The date, time and IP address of the submission, recorded with the message to help identify automated abuse
Information collected automatically
Our web server keeps standard access logs (IP address, timestamp, requested page, browser user agent). These are used for security and troubleshooting and are not used to build a profile of you.
Cookies
This site sets one cookie: a PHP session cookie. It exists solely to hold the security token that protects the contact form against cross-site request forgery. It contains no personal information, is not used for tracking, and expires when you close your browser.
We do not use advertising cookies, analytics cookies, social media pixels or cross-site trackers on this website. That is why you are not being asked to dismiss a consent banner.
Why we use it and on what basis
We use the information you submit solely to respond to your enquiry and, if we go on to work together, to deliver the services you asked for. The lawful basis is your request to be contacted — you gave us the information specifically so we could reply.
We do not add enquiries to a marketing list. If we ever start a newsletter, joining it would be a separate, explicit opt-in.
Third parties we use
- Brevo (email delivery) — contact form submissions are sent to our inbox through Brevo's transactional email API. The content of your message passes through their systems in order to be delivered.
- Google Fonts — the Inter typeface is loaded from Google's servers, which means Google receives your IP address and browser user agent as part of that request. No cookie is set by this.
We do not sell or rent your information to anyone, for any purpose.
How long we keep it
Enquiry emails are retained for up to three years, so we can find the history if you come back to us. Server access logs are retained for up to 90 days. If we work together, project records and correspondence are kept for seven years to meet business and tax record-keeping obligations.
You can ask us to delete your enquiry at any time and we will.
Your rights
Depending on where you live you may have the right to request a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, or object to our use of it. Residents of California, Colorado, Connecticut, Virginia and other states with comprehensive privacy laws have these rights by statute; we extend the same treatment to everyone who asks, regardless of location.
To exercise any of these, send the request through our contact form. We will respond within 30 days. We will never charge you for a request or treat you differently for making one.
We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act, so there is nothing to opt out of.
Security
The site is served over HTTPS, enforces a Content Security Policy, and protects form submissions with CSRF tokens and server-side validation. No system is perfectly secure, but we apply current practice and patch promptly.
Children
This site offers business services and is not directed at children. We do not knowingly collect information from anyone under 13. If you believe a child has submitted information to us, contact us and we will delete it.
Changes to this policy
If we change what we collect or how we use it, we will update this page and change the date at the top. Material changes will be noted clearly rather than slipped in.