Privacy Policy

Enfenety Dev is a straightforward portfolio and contact site. We do not operate user accounts, newsletters, analytics, or any system that persistently profiles visitors. The only personal data that leaves your device is what you choose to send through the contact form.

When you submit our contact form, we receive your name, email address, and message. You may optionally include your company name and a service preference. That data is used solely to respond to your inquiry — we do not store it in a database, add it to a mailing list, or share it with third parties for marketing.

Our server also receives your IP address temporarily for rate limiting (three submissions per IP per hour, tracked via Upstash Redis with a one-hour expiry). The IP is not logged or linked to your message after that window closes.

When you hit Send, the following happens end-to-end:

• Your browser validates the fields and sends them to our server action
• The server verifies a Cloudflare Turnstile token (bot detection)
• It checks the rate limit against a temporary Upstash Redis key
• It strips HTML tags and control characters from the input
• It forwards the sanitised message to us via Resend, our email provider
• We receive the email in our inbox — no database write occurs

The submission is never written to disk, logged to file, or retained anywhere on our infrastructure after the email is dispatched. Resend holds delivery logs under their standard retention policy, and we delete those manually on an ongoing basis.

We layer several defences to keep the contact form clean without burdening real visitors:

• Cloudflare Turnstile — a privacy-preserving alternative to CAPTCHA. It may set a brief cookie or use browser signals to confirm you are human. Cloudflare states it does not sell your data or use it for ad targeting.
• Honeypot field — a form field invisible to humans that bots tend to fill. If completed, the submission is silently discarded.
• Server-side rate limiting — three submissions per IP per hour, enforced via Upstash Redis. The key auto-expires and is never used outside this check.

We do not use third-party analytics scripts, tracking pixels, or fingerprinting libraries.

This website is hosted on Cloudflare (via OpenNext) and served from its global edge network. Cloudflare processes requests according to their own privacy policy and provides the Turnstile bot-detection service. No request data is logged by us at the application layer beyond the transient rate-limit counters described above.

Emails are routed through Resend, which acts as our email delivery provider. Resend receives the form contents and delivers them to our inbox. We have configured our Resend account to retain delivery logs for the minimum period required for debugging, and we do not use their analytics or engagement-tracking features.

This site does not set its own cookies. Cloudflare Turnstile may set a short-lived cookie as part of its browser challenge mechanism. Turnstile operates independently of our site — we cannot control its cookie behaviour, but Cloudflare documents it as privacy-first and does not use it for advertising. There are no analytics, preference, or session cookies from our side.

Even though we hold almost no personal data, we respect your privacy rights. You may request:

• Access a summary of any data we hold about you
• Rectification correction of inaccurate information
• Erasure deletion of any data we may hold
• Withdrawal of consent if you previously contacted us and wish to withdraw, just let us know

To exercise any of these, email info@enfenetydev.com. We will respond within 30 days. Because we do not run a data storage system for submissions, your contact email is likely the only reference we have — please send your request from the same address you originally used.

All form submissions are transmitted over HTTPS. The server action sanitises input (strips HTML and control characters) before forwarding it. The email is sent via Resend's TLS-encrypted SMTP relay. We do not store credit cards, passwords, or any sensitive category of personal data on this site.

Rate-limit counters expire from Upstash Redis automatically after one hour. Contact form submissions exist only as emails in our inbox and are subject to our internal email retention practices — typically deleted once the inquiry is resolved. We do not operate a database, backup archive, or log store that captures your personal data.

If we change how we handle data, we will update this page and revise the “Last updated” date at the top. Material changes will be noted on our home page for a reasonable period.

Questions about this policy or our data practices? Reach us at info@enfenetydev.com or through the contact form.