This policy describes what this website collects, why, and who else touches it. It was written against what the site actually does rather than from a generic template — every system named below is one this site really uses.
Who is responsible This site is operated by Franz Abiva, an independent web developer, designer and video editor based in the Philippines. For anything in this policy — including a request to see, correct or delete your data — email hey@franzabiva.com. [FILL IN: your registered business name and address, if you have one. Required in some jurisdictions.] What is collected when you use the contact form The contact form asks for your name and email address, and optionally your company, phone number, budget range, timeline and a description of your project. All of it is stored in this site's database and emailed to hey@franzabiva.com. Your IP address and the time of submission are also recorded, purely to rate-limit spam. This is used to answer your enquiry and, if we work together, to run the project. It is never sold, and never used for marketing you did not ask for. What is collected when you use the chat assistant The chat widget records the messages you send, the replies you receive, which page you started from, and your IP address. If you give your name and email to be passed on, those are stored too and turned into a normal enquiry. Your messages are sent to Anthropic, the provider of the AI model that generates the replies, and are processed on their infrastructure outside the Philippines. Anthropic's own privacy terms apply to that processing. Do not put sensitive personal information, passwords or payment details into the chat. A short random identifier is stored in your browser's local storage so the conversation survives a page reload. It contains no personal information and you can clear it by clearing your browser storage. What is collected if you have a client account Clients working on a project get an account on the client portal. That account holds your name, email address, company name and a securely hashed password — the password itself is never stored in readable form and cannot be recovered, only reset. The portal also stores the comments you post, the files you upload, and the record of when you last signed in. All of it is visible only to you and to Franz. Cookies and similar storage This site sets one cookie of its own: a session cookie used to keep you signed in to the admin panel or the client portal. It is strictly necessary, contains only a session identifier, and is set only once you sign in. It is marked HttpOnly and expires when the session ends. The site also uses your browser's local storage for two things: your cookie prefere…