What this covers
This policy covers the formalnoise.com website, meaning these pages and the contact form. Formal Noise is the data controller.
The Qwerto application, served at formalnoise.com/qwerto, is a separate product with its own data handling and is not described here.
What we collect
Browsing the site does not require you to give us anything. We collect personal data in one place: the contact form.
When you send a message, we record:
- the name, email address and message you type
- your IP address and the two-letter country code your request arrives with
- your browser's user-agent string
- the time you sent it
The last three are kept so we can tell a real message from an automated one, and are not used to build any profile of you.
What we do with it
We use your messages to answer you. Nothing more. We do not sell them, rent them, share them for anyone else's marketing, or use them to advertise to you.
Keeping bots out
The contact form is protected by Cloudflare Turnstile. Cloudflare receives your IP address and a challenge token in order to judge whether the submission is automated. Turnstile is a privacy-focused alternative to a CAPTCHA and is not used to track you across sites.
Two further checks run entirely in your browser and send us nothing: a form field hidden from people that only a bot fills in, and a minimum time between the page loading and the form being sent.
We also count submissions per IP address for one hour at a time, to stop the form being flooded. That counter holds a number and a timestamp, and is overwritten each hour.
Cookies
This site sets no analytics, advertising or tracking cookies. There is no Google Analytics, no pixel, no third-party tag.
One cookie exists, fn_admin, and it is only set when a site administrator signs in to the
private admin area. It is never set for ordinary visitors.
Cloudflare may set its own cookies as part of protecting the site from attack.
Who else processes your data
- Cloudflare hosts the site, stores contact submissions, runs Turnstile, and delivers the notification email. Cloudflare also keeps short-lived request logs, which include IP addresses, for security and debugging.
- Google serves the typeface used on this site, Plus Jakarta Sans, through Google Fonts, so loading a page sends your IP address and user agent to Google.
How long we keep it
Contact submissions stay in the database until we delete them, and we clear out anything we no longer need. Cloudflare's request logs are kept for a short period set by Cloudflare, then discarded. Rate-limit counters are overwritten every hour.
You can ask us to delete your message at any time and we will.
Your rights
Wherever you are, you can ask us to show you what we hold about you, correct it, delete it, or stop using it. If you are in the UK, EU, or a place with comparable law, those are rights you have rather than favours we grant, and we will not charge you or make it difficult.
Email hello@formalnoise.com and we will deal with it.
Children
This site is not aimed at children and we do not knowingly collect anything from them. If a child has sent us a message, tell us and we will remove it.
Changes
If we change how any of this works, we will change this page and move the date at the top. There is no mailing list to notify, because we do not keep one.
