Privacy Policy

Sanctum Timepieces runs sanctumtimepieces.com. This policy describes what we collect when you visit, why, and what you can do about it. We have tried to describe what the site actually does rather than everything it might conceivably do.

The short version

• We collect what you type into the contact form, and nothing else that identifies you personally.
• You cannot create an account, and we do not take payments here.
• We do not sell your information, and we do not send marketing email unless you ask us something first.
• Analytics cookies only load if you accept them. Declining costs you nothing.

What we collect

Information you give us

The contact form asks for your first name, last name, and email address, which are required, and a phone number, a subject of interest, and your message. You also tick a box confirming you agree to be contacted. That is the whole form, and we do not collect anything else about you directly.

Information collected automatically

Our web server records standard request logs for every visit:

• Your IP address
• Your browser and operating system, as reported by your browser
• The page requested, the time, and the response

These logs exist to keep the site running and to spot abuse. They rotate daily and are deleted after fourteen days.

We also use your IP address, held only in memory and never written down, to limit how many messages can be sent from one place in a short window. That is a spam control, not a profile.

Cookies and similar technologies

The site sets no cookies of its own for visitors. If you accept the cookie notice, Google Analytics and the Meta pixel may set their own cookies. If you decline, or simply ignore the notice, they never load.

Your choice is stored in your browser's local storage, not in a cookie, and is never sent to us. Clearing your browsing data will clear it, and the notice will ask again.

Signing in to the admin panel sets one session cookie. That applies only to staff, not to visitors.

Why we use it

• To answer you. A message you send is used to reply and to keep track of the conversation.
• To run the site. Server logs and rate limiting keep it available and reduce spam.
• To understand what is useful. If you accept analytics, we see aggregate patterns such as which pieces get looked at.

Who else sees it

We do not sell your personal information. We do not trade or rent it. It reaches other companies only where they perform a function for us:

• DigitalOcean hosts the site and its database, in the United States.
• Formspree forwards contact form submissions to our inbox.
• Resend delivers inquiry notification email, where configured.
• Google Fonts serves the typefaces used on the site. Loading a font sends your IP address to Google, which happens on every visit and is not covered by the cookie notice, because it is not a cookie.
• Google Analytics and Meta, only if you accept analytics cookies.

We may also disclose information if the law requires it, or to protect our rights, safety, or property.

How long we keep it

• Contact form messages are kept until we no longer need them for the conversation or our records. You can ask us to delete yours at any time.
• Server logs are deleted after fourteen days.
• Rate limiting data is held in memory only and disappears within minutes, and on restart.

Your choices

• Do not fill in the form. Everything else on the site works without giving us anything.
• Decline analytics. Use the button below to change your mind at any time.
• Ask us to delete your message. Email us and we will.

If you are a California resident, you have specific rights set out in our California Privacy Notice.

Security

The site is served over HTTPS. Admin accounts use individually hashed passwords, sign-in attempts are rate limited, and the admin panel is not indexed by search engines. No system is perfectly secure, but a contact form message is the only personal information we hold, and we hold as little of it as we can.

Children

This site is meant for adults and is not directed at children under 13. We do not knowingly collect information from them. If you believe a child has sent us something, contact us and we will delete it.

Changes

If this policy changes, the date at the top of this page changes with it. Material changes will be noted on the site.