Privacy.

Six things. Two happen on every visit, because the site can’t be served without them. The rest only happen when you use a form or say yes.

• The contact form Your name, email, and message, plus company, phone and the service you picked, if you filled those in. It’s emailed straight to info@316software.com through Cloudflare Email Sending. Before it goes, TypeSafe reads the message to label which service it’s about. There’s no database behind this site: your message is an email in my inbox, and that’s all.
• The service finder What you describe and your email. TypeSafe reads the description to match it to a service and a tier; your email isn’t sent to them. Both are then emailed to me with the match, so I can reply once if I can help. If you ask for it, the recommendation is emailed to the address you gave, once: the service and its prices, with nothing you typed in it. Nothing is stored anywhere else, and you’re not added to a list.
• The bot check on both forms Cloudflare Turnstile, which tells a person from a script. It reads your IP address and some properties of your browser and gives the page a token the server checks. It sets no advertising cookie and doesn’t follow you across sites. Cloudflare’s Turnstile Privacy Addendum covers what Cloudflare does with it.
• Page counts Cloudflare Web Analytics, which runs on Cloudflare’s network instead of in the page: which page was opened, where the link came from, the country, and roughly what kind of device. No cookie, no fingerprint, no identifier that follows one visitor from one page to the next.
• Server logs The ordinary record of a request reaching Cloudflare: IP address, time, URL, user agent. It’s how a site is kept running and attacks get noticed, and it’s short-lived.
• The Meta Pixel, and only if you accept If you accept the cookie bar, Meta’s tag loads and reports that you opened a page: the URL, your IP address and your browser, to Meta. It’s there so ads for 316Software can be shown to people who’ve visited this site, and it reports page views and nothing else. It never runs before you answer, and a no is remembered exactly as long as a yes.

One cookie, and it needs your yes. Three things kept in the browser that never leave it.

• _fbp and _fbc · cookies, Meta Set only after you accept, so Meta can recognize a browser it has already seen. They last about 3 months. Declining later deletes them.
• 316-consent · local storage Your answer to the cookie bar and the date you gave it, kept for a year so you’re only asked once. It’s never sent anywhere, including to me.
• 316-theme · local storage Whether you picked the light theme, the dark one, or your system’s setting. Also never sent anywhere.
• 316:finder · session storage What you typed into the service finder, so it’s still there if you come back to the page. It lasts until you close the tab, and it isn’t sent anywhere.
• The booking calendar When a message or a finder description looks like work I do, you’re offered a 30-minute call: in a Cal.com frame on /contact, or as a link to Cal.com’s own page from the finder and its email. Opening it puts you on Cal.com, and Cal.com sets its own cookies there under its own policy. If you send the form first, the frame opens with the name and email you just typed already filled in, so you don’t type them twice; nothing else from your message goes over. Not opening it loads nothing and sets nothing.

Five companies, each doing one job. None of them buys anything from me, because nothing here is for sale.

• Cloudflare Serves the site, delivers the form email, runs the bot check and counts the pages. United States and its global network.
• Google Carries the 316Software mailbox (Google Workspace), so your message lands there.
• Cal.com Runs the booking calendar, and only for the people offered a call. If you book one, it holds what a booking is: your name, your email and the time you picked.
• Meta Only if you accept, and only page views. Handled under Meta’s own terms and policy once it reaches them.
• TypeSafe Reads the text of a contact message or a finder description and says which service it sounds like. It gets the words, plus the name and company on a contact message, but never an email address or a phone number.

PIPEDA and British Columbia’s PIPA give you these rights. One email reaches me, and I’m the one who acts on it.

• A copy, or a correction Ask what I hold about you and I’ll send it, or tell me what’s wrong and I’ll fix it. In practice, it’s the email you sent.
• Deletion Ask and I’ll delete our correspondence. I keep a message only as long as the conversation is going or the work it led to needs it.
• Your consent back Reopen the bar and decline. No email needed, and nothing else on the site changes.
• A complaint that goes over my head If my answer isn’t good enough, the Office of the Privacy Commissioner of Canada and the Office of the Information and Privacy Commissioner for British Columbia both take complaints directly.