1. What we collect
Only what you give us or what the service strictly needs:
- Contact form: name, email, optional GitHub repo URL, message.
- Stripe checkout: handled by Stripe. We see only the email + last-4 of the card. We never store full card details.
- Server logs: IP + page accessed, kept ~30 days for debugging and abuse prevention.
- Project delivery: when you hire us we get repo access + env credentials. We treat them as secrets, rotate them at handover, and don't store copies.