Transparency
Privacy
The short version: no analytics, no ads, no selling your data. This page lists everything the site collects — on the public site and in the client portal — who else touches it, and how long I keep it.
The contact form
When you send the contact form, I collect what you type: your name, email address, message, and — if you provide them — your phone number, preferred contact method, service interest, and budget range. The submission is emailed to me and recorded in a log on my server, along with the page you sent it from, your IP address, and your browser's user-agent string. I use it to respond to your inquiry — nothing else, and it's never added to a marketing list.
Submissions are kept for up to one year, then deleted.
Founding-client applications
The application form works the same way: what you type (name, email, phone, business details, and your answers), plus your IP address and browser user-agent in the log. Applications are emailed to me, kept for up to one year, and used only to evaluate and respond to your application.
Client accounts
If you're a client, the portal holds your account (name, email, and sign-in credentials — passwords are stored only as hashes), your project records, and your billing history: quotes, invoices, and payments. I keep these for as long as we work together; billing records stay afterward because accounting requires it. Sign-in attempts, including the network address they come from, are logged for security and deleted after seven days.
Who else sees your data
Two service providers, and only what each needs to do its job. Stripe processes payments: when you pay an invoice, Stripe receives your email address, the invoice number, and the amount — and you enter card details on Stripe's own payment page, so card numbers never touch my server. Resend delivers email: every message this site sends — contact-form notifications and confirmations, invoices, password resets — travels through it.
Your data is never sold, never used for advertising, and never shared beyond those two providers.
Cookies and browser storage
The site sets one cookie: a session identifier (PHPSESSID) that lets the site recognize a signed-in visit. If you're not signed in, it contains nothing about you — it's a random ID attached to an empty session — and it's deleted when you close your browser. There are no tracking or advertising cookies, and no third-party cookies.
A few things are stored in your browser itself: the reduce-motion switch in the footer saves your preference, but only if you use it; the contact form auto-saves a draft of what you've typed — your name, email, and phone, never the message — so a mishap doesn't wipe your work, and deletes the draft when you submit; and signed-in clients' sidebar preference is remembered between visits. Clearing your browser's site data removes all of it, and signing out of the portal clears it automatically.
Do Not Track
This site doesn't track anyone, so a Do Not Track signal changes nothing — there's no tracking for it to turn off.
Questions and changes
Email me at hello@bigbangvisibility.com with privacy questions, or to ask what information I hold about you. There's also the contact form, if you'd prefer it.
If anything on this page changes, I'll update it here and change the effective date above.