Privacy policy
What this site does — and deliberately doesn't do — with your information. Last updated 15 September 2026.
The short version
This site has no analytics, no advertising or tracking pixels, and sets no cookies. The only personal information I actually handle is what you choose to send me through the contact form, or hand to Stripe and Cal.com if you pay an invoice or book a call, plus the technical basics that any website — and the bot check on the contact form — need in order to work. I don't sell or share your information, and there is no mailing list.
Who this is about
DevWorks LLC is a one-person software studio run by Ian Wheeler in the United States. This policy covers the website at devworksllc.com and all of its pages, including the digital business card at /card. Questions or requests: [email protected].
The contact form
If you fill out the form on the contact page, it collects:
- your name
- your email address
- your phone number, if you enter one (optional)
- your company, if you enter one (optional)
- the project description you write
I use this only to read your message, reply, and scope out possible work. When you submit the form, the details are emailed straight to my inbox ([email protected]) with your address attached so I can reply directly. The email is sent through Resend, an email delivery service acting on my behalf; your message passes through their system to reach me.
I keep these emails for as long as we're in contact about your enquiry and for a reasonable period afterwards for my own records, then delete them. I don't add you to any list, because there isn't one. If you'd rather not use the form, just email me directly — that skips the form, the bot check, and Resend entirely.
Spam protection: Cloudflare Turnstile
The contact form is protected by Cloudflare Turnstile, which tells humans and bots apart without puzzles, image grids, or tracking cookies. It runs invisibly in the background — most people never see anything. Occasionally a genuinely suspicious visitor may be shown a simple checkbox; if the check can't be completed, the form asks you to email me instead.
To make that judgement, Cloudflare processes a few technical signals from your browser when you use the form — including your IP address, a fingerprint of your browser and network, and your user-agent string. Cloudflare states these signals are used "solely to detect and block bots," not to "identify, profile or target any individuals," and Turnstile sets no advertising cookies. This processing is governed by the Cloudflare Turnstile Privacy Addendum, which I'm required to link to here as a condition of using Turnstile in its invisible mode.
Paying an invoice: Stripe
If you use the pay page to pay an invoice or deposit, entering an amount and clicking through sends you to a checkout page hosted by Stripe, the payment processor I use. Before you leave this site, the form passes Stripe the amount, whatever note you typed, and your name and email if you entered them. Your card number or bank account details are entered directly on Stripe's page — they're never sent to or stored by this site or server.
Stripe notifies me when a payment succeeds or fails so I can follow up, along with the name, email, amount, and note you provided. I don't otherwise access or store your card or bank details — Stripe handles that as the payment processor. Stripe's handling of your payment information is covered by the Stripe Privacy Policy.
Booking a call: Cal.com
The "Book a call" links across this site go to Cal.com, a third-party scheduling tool I use to manage my calendar. When you book a time there, Cal.com collects whatever you enter in its form — typically your name, email address, and the reason for the call — in order to schedule the meeting and send you a confirmation and reminders. That booking happens entirely on Cal.com's site; I only see the details of the meeting you scheduled. Cal.com's handling of that information is covered by the Cal.com Privacy Policy.
Hosting: Cloudflare Pages
The site is hosted on Cloudflare Pages. As with any web host, Cloudflare automatically processes your IP address, the pages you request, and your user-agent in order to deliver the site and to protect it from attacks and abuse. I have not added any visitor logging or measurement of my own on top of that, and I don't build profiles of visitors. Cloudflare's handling of this data is covered by the Cloudflare Privacy Policy.
Fonts: Google Fonts
Every page loads the Archivo typeface from Google Fonts. Your browser fetches the font files directly from Google's servers, which means Google receives your IP address and user-agent as part of that request. Google states it does not use Google Fonts requests to build profiles or to serve ads. If you'd rather this didn't happen, a browser or extension that blocks third-party requests will stop it, and the site still works with a fallback font.
The digital business card
On the card page, the "Save contact" button builds a contact file (vCard) entirely inside your browser and hands it to you to save. Nothing about that action is sent to me or to anyone else. The QR code on that page is a plain image that points to the card's web address — scanning it simply opens the page. The card also links out to LinkedIn and GitHub; those are separate services with their own privacy policies.
What this site does not do
- no analytics, visitor counters, or measurement tools
- no advertising, retargeting, or tracking pixels
- no cookies or other browser storage set by this site
- no session recording or heatmaps
- no selling, renting, or sharing of personal information
- no third-party embeds or redirects beyond the providers named above (fonts, bot protection, payments, and call booking)
How long information is kept
Contact-form emails: as described above — kept while we're in touch and for a reasonable period afterwards, then deleted. Payment notification emails from Stripe (name, email, amount, note) are kept for my own bookkeeping records; your card and bank details are held by Stripe, not me, under their own retention rules. Technical data handled by Cloudflare (hosting and Turnstile) is retained by Cloudflare according to their own policies; I don't receive or store a separate copy of it. Cal.com retains booking information under its own policy — I only keep the meeting details it sends me.
Your choices
You can email me at [email protected] to ask what information I hold about you, to request a copy, or to ask me to delete it, and I'll do that. Depending on where you live you may have additional rights under laws such as the GDPR or CCPA; email me and I'll help however I reasonably can. If you want to avoid the form's third-party providers altogether, contact me by plain email instead.
Children
This site is meant for people looking to hire software help for a business or project. It isn't directed at children, and I don't knowingly collect information from them.
Changes to this policy
If this policy changes, I'll update the "last updated" date at the top of the page. Material changes will be reflected here before they take effect.
Contact
Ian Wheeler — DevWorks LLC
[email protected]
United States