Contact us
Privacy

Privacy Policy

Effective date:

On this page
  1. Who we are
  2. What this policy covers
  3. What we collect and why
  4. Analytics
  5. What we don’t do
  6. How long we keep it
  7. Your choices
  8. Changes to this policy
  9. Contact

Who we are

Fresh Coat Dev builds websites for small businesses. In this policy, “we” and “us” mean Fresh Coat Dev. You can reach us at freshcoatdev@gmail.com.

What this policy covers

This policy covers two places:

  • Our website, freshcoatweb-2zy.pages.dev
  • The Fresh Coat client portal, where clients sign in to send and track website change requests.

It explains what we collect, why we collect it, who handles it, and how long we keep it.

What we collect and why

On our website

  • The site doesn’t set cookies or use browser storage.
  • When you visit, your browser sends the technical details needed to show you a page. These include your IP address, your browser, and the page you asked for. Your browser may also send a report if a page fails to load. Cloudflare hosts our site and handles this data so the site works.

When you email us

  • If you email us, we get your email address and whatever you write. We use it to reply to you. We use Gmail for email.

When you use our contact form

  • The form asks for your name, your email address and a message. You can also add your website. We use these to reply to you.
  • Cloudflare sends your message to our Gmail inbox. We don’t keep a separate copy on our website.
  • To block spam, the form uses Cloudflare Turnstile. Turnstile checks technical details from your browser, such as your IP address and browser type. It doesn’t read what you type into the form. Cloudflare explains how it handles this data in its Turnstile privacy addendum.
  • To stop too many messages being sent at once, we keep a coded version of your IP address for about 10 minutes.

In the client portal

Signing in.
You enter your email address, and Cloudflare Access sends you a one-time code. This lets approved people sign in. Cloudflare Access keeps a record of each sign-in: your email address, IP address, country and the time. It keeps this record for a short period set by Cloudflare.
Cookies.
The portal uses two cookies. Cloudflare Access sets one when you sign in (CF_Authorization) to keep you signed in. A sign-in session lasts 24 hours. We set the other (fc_client) to remember which client you last picked. It lasts up to 400 days.
Member emails.
Our staff add the email addresses of the people linked to each client account. We use them to decide who can see a client’s requests.
Change requests.
When you or our staff use the portal, we store each request (the page, the description and the status). We also store comments with the author’s email address, the status history, and when each request was read. We use this to handle website change requests.
Logs.
Cloudflare keeps logs of requests to the portal. These logs include IP addresses. Sign-in emails, sign-in tokens and cookies are removed from them. We use these logs to find and fix problems.
Traces.
Cloudflare traces a small sample of portal requests to help us troubleshoot. It keeps these traces for a short period set by Cloudflare.
Staff activity.
Cloudflare keeps an audit log of actions our staff take as admins. It covers staff actions only, not visitors or clients.

We store member emails, requests and comments on Cloudflare.

Links to other sites

  • Our case studies link to other websites. We don’t collect anything when you click them. Those sites have their own privacy policies.

Analytics

Our website uses Cloudflare Web Analytics to count visits and see how fast pages load. It collects:

  • the page you visited
  • the site that sent you (the referrer)
  • your country
  • your device type, browser and operating system
  • how long the page took to load, including Core Web Vitals timing

It doesn’t use cookies or other browser storage, and it doesn’t fingerprint visitors. Cloudflare discards your IP address, so it isn’t stored. Cloudflare processes this data for us.

What we don’t do

We never sell your personal data. We never use it for ads.

How long we keep it

We keep the data we control until you ask us to delete it. That includes emails you send us, messages from our contact form, portal member emails, change requests and comments.

The fc_client cookie lasts up to 400 days.

Cloudflare handles some data for us. Here’s how long it keeps it:

Contact form spam limit (coded IP address):
about 10 minutes.
Portal request logs:
3 days.
Portal request traces (a small sample):
a short period set by Cloudflare.
Sign-in records:
a short period set by Cloudflare.
Sign-in sessions:
they end after 24 hours.
Staff audit logs:
18 months. These cover staff actions only, not visitors or clients.
Technical data needed to serve our website, and website analytics:
Cloudflare sets how long it keeps this.

Your choices

You can ask to see the personal data we hold about you. You can also ask us to delete it. Email freshcoatdev@gmail.com, and tell us which email address you use with us.

Changes to this policy

If we change this policy, we’ll post the new version on this page and update the effective date.

Contact

Questions about this policy? Email freshcoatdev@gmail.com.

Back to top