Privacy

Last updated September 2026

This site is run by RossTech LLC. It is a portfolio and a way to start a conversation, it collects as little as it can get away with, and what follows is the whole of it.

The site is hosted on Vercel, which sees the requests your browser makes in order to serve the pages. I don't sell your data, and there is nobody to sell it to.

What you send me

The contact form takes your name, email address, optionally your company, what kind of engagement you're after, a budget range, and your message. There is also a hidden field that only bots fill in. It is emailed straight to me. There is no CRM, no mailing list, and no marketing automation behind it, and I use it to reply to you. The message passes through the hosting function and the email provider on its way, so those two hold a copy in transit.

Email delivery runs through Resend. Spam filtering uses Cloudflare Turnstile, which sees your IP address and browser in order to tell a person from a bot. Cloudflare's documentation says those signals are not used to identify or profile you, and Turnstile does not read what you typed.

When you email support

Email to a RossTech support address, or to the address of one of my apps (Word Searchable, PixlPets, RWeUp, KidMath), gets a case number, so nothing gets lost. The case is stored with Supabase, in the United States: your email address, the case number, which product it is about, what kind of request it is, and where it stands. The subject line is kept only for RossTech and RWeUp mail. It is never kept for Word Searchable, PixlPets or KidMath, which children and families use, or for mail I cannot match to a product. The message itself stays in my email.

Your email address and any subject line are deleted from the case 90 days after it closes, or after 90 days with no activity.

When I have it switched on, a short excerpt of a message to a RossTech or RWeUp address (the subject and the start of the text, with email addresses, phone numbers and links taken out) goes to TypeSafe AI to work out what kind of request it is. TypeSafe says it does not train its models on what it is sent, and it runs its service in the United States. Mail about the apps for children and families, and mail I cannot match to a product, is never sent to TypeSafe.

What gets measured

Vercel Analytics and Speed Insights record page views and load performance. They set no cookies and do not follow you to other sites. Each page view is logged with the page, the referrer, a rough location, and your browser and device type, and the per-visitor identifier Vercel derives from the request is discarded after 24 hours. I use it to see which pages people read and whether the site is fast.

This site sets no advertising cookies, runs no ad network, and has no third-party tracking pixels.

A small amount of funnel measurement (funnel-events.json) runs alongside Vercel Analytics: it stores first_touch, meaning how you first arrived (the campaign source, medium, and campaign name from the link you clicked, plus the page you landed on) in your browser's localStorage only, with no cookie and no visitor identifier attached to it.

Payments

If you pay for an engagement, checkout is handled entirely by Stripe. Card details go to Stripe and never touch this site or any system I run. I see what Stripe shows a merchant: your name, your email, the amount, and the last four digits of the card. Never the card number.

How long I keep it

Enquiries stay in my email, because that is where the conversation happens. Threads that don't go anywhere get cleared out after about a year.

Wherever you live, email me and I'll tell you what I have, correct it, or delete it. No forms and no process.

Client work

Anything you share with me during an engagement is covered by the NDA we sign before it starts, not by this page. The short version is on the engagements page, along with what tooling touches your code.

Questions

Email nate@rosstech.dev and a person will answer.