Privacy policy

• Contact details: full name and email address (required); phone or WhatsApp number, company name and country (optional).
• Project details: the package you choose and what you write about your project (project name, business category, description, desired pages and features, inspiration links, existing website, preferred deadline and additional requirements).
• Order records: an order reference, the order status, the price at the time of ordering, and the date and version of the terms you accepted.
• Payment records received from PayPal: PayPal order and transaction (capture) identifiers, payment status, amount, currency and payment date. Your card or PayPal account details are entered on PayPal and never reach this site’s server.

• Orders are stored in a PostgreSQL database used only by this site, hosted by Supabase in the EU (Frankfurt, Germany).
• Your order status link contains a random access code. Only a one-way hash (SHA-256) of that code is stored, so the link itself cannot be recovered from the database. Anyone who has the link can view your order details (status, package, price, and your name and email address).
• While you fill in the order form, your answers are kept in your browser’s session storage (this tab only) so they are not lost between steps. They are not sent anywhere until you submit.
• The website runs on Cloudflare, which handles every request (including your IP address) and keeps the server logs. The application logs technical events with the order reference, identifiers and status codes only, not your contact details or messages.

Emails are sent through Resend, an email delivery service. When you submit an order, a notification with your details and project requirements is sent to the site owner, with your email address as the reply-to address. You receive a confirmation email after a verified payment, and after a quote request (at most one per email address every 24 hours). Each email is stored in the database with its delivery status so that a failed delivery can be retried.

Payments are processed by PayPal. When you pay, PayPal handles your payment details under its own privacy terms. This site receives the payment confirmation and the identifiers listed above. PayPal also sends signed notifications about payments; only their event identifier, event type and the related PayPal payment identifier are recorded, to avoid processing the same event twice.

To limit abuse, the number of requests from a connection is counted for a short time window. The IP address is not stored: it is turned into a salted one-way hash, and expired counters are deleted automatically.

The contact form on the home page sends your name, email address and message to the site owner by email through Resend. These messages are not stored in the order database. Order notifications and contact messages arrive in the site owner’s mailbox, hosted by OVH.

The site owner, Youssef Hamouda, and the service providers that run the service, only as needed for it: Cloudflare (website hosting and request logs), Supabase (database), PayPal (payments), Resend (email delivery) and OVH (the owner’s mailbox). To ask about your data, contact contact@ham0uda.dev.

Questions about this page, an order or your data: contact@ham0uda.dev.