legal · privacy policy
Privacy Policy
Last updated: 2026-08-27
envlpr ("we", "us", "our") operates envlpr.com. This policy describes what the site collects, which is very little, and what happens to it.
What this site does not do
- No analytics, tracking pixels, advertising scripts or embeds.
- No cookies or non-essential storage. The only thing saved in your browser is your chosen colour theme, in
localStorage, and it never leaves your device. - No third-party fonts or CDNs. Everything on the page is served from our own origin.
The contact form
The form on /contact stores exactly what you type into it — name, email, company if given, a budget band and your message — plus the page you came from, as a plain referrer string. No UTM parameters, click ids or fingerprints are recorded. Submissions are stored in a Cloudflare D1 database and are read only by us, in order to reply to you. They are retained until the conversation is over or for twelve months, whichever is shorter, unless you ask us to delete them sooner.
That page loads Cloudflare Turnstile to keep the form from becoming a spam relay. Turnstile is cookie-less and does not profile visitors; it is the only third-party request the site makes, and it happens only on /contact. Cloudflare's handling of that check is described in their own privacy policy.
Server logs
The site is served by Cloudflare. Cloudflare keeps short-lived request logs for security and reliability, as any hosting provider does. We do not enrich, export or analyse them.
Dashboard (envlpr.com/app)
/app is an internal tool for reading the contact-form inbox. It is not a product for the public — access is restricted to envlpr staff by Cloudflare Access, which records the email address of whoever signs in. Nothing on the public pages depends on it.
Your rights
You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. Email privacy@envlpr.com and we will respond within 20 working days, as the New Zealand Privacy Act 2020 requires. If you are in the EU or UK the GDPR rights of access, rectification, erasure and portability apply in the same way.
Changes
If this policy changes, the date at the top changes with it. If the site ever starts collecting more than described here, that will be an affirmative opt-in, not a quiet edit.
Contact
Email: privacy@envlpr.com
Address: Wellington, New Zealand
GitHub: github.com/envlpr