TIBIBYTES PRIVACY POLICY

1. Information You Submit & Technical Request Data

Contact Form Fields: When you submit the inquiry form on our homepage, the form collects five required inputs along with your selected package tier:

• Your Name (name)
• Business Name (business)
• Email Address (email)
• Phone Number (phone)
• Project Message (“Tell me about your business,” message)
• Selected Package (tier: Silver $499 CAD, Gold $749 CAD, or Platinum $999 CAD)

The frontend also formats an email subject line containing your business name and name (_subject), along with submission formatting flags (_template and _captcha), as part of the JSON payload.

Direct Communications: Any follow-up emails, project text, photos, or files you send directly to hello@tibibytes.com.

Technical Data Handled by /contact.php: When the form posts to our PHP endpoint (/contact.php), the script reads the visitor IP address provided by the web server (REMOTE_ADDR), includes a server timestamp and up to 16 characters of that IP address in the notification email sent to hello@tibibytes.com, and temporarily records an MD5 hash of the IP address for rate limiting (maximum 5 attempts per 10 minutes) as well as a SHA-256 hash of the submitted inquiry fingerprint (email, name, tier, message) in the server's temporary directory to prevent duplicate sends over a 15-minute window.

2. Where Submissions Are Sent (/contact.php & FormSubmit Fallback)

Primary Endpoint (/contact.php on Hostinger): The contact form first sends a JSON POST request to /contact.php hosted on Hostinger (hostinger.com). When accepted, /contact.php sends an email via PHP's server mailer directly to hello@tibibytes.com (also hosted on Hostinger) with your email address set as the Reply-To header.

Third-Party Emergency Fallback (FormSubmit): As coded in the frontend submission logic, if and only if /contact.php returns a clear indication that the PHP endpoint could not process or mail the submission (HTTP 404, 405, 501, raw unexecuted PHP source on a non-PHP static preview host, or HTTP 500 explicitly reporting MAILER_FAILED), the browser falls back automatically to FormSubmit (https://formsubmit.co/ajax/hello@tibibytes.com). In that situation, the browser transmits the same form payload directly to FormSubmit's external servers so FormSubmit can forward the inquiry by email to hello@tibibytes.com.

To avoid duplicate submissions, the form does not fall back to FormSubmit on timeouts, interrupted network connections, validation errors, or rate-limit rejections (HTTP 429). When FormSubmit is used, your submission passes through FormSubmit's infrastructure and is governed by FormSubmit's own privacy policy.

3. Cookies, Analytics & External Connections

No Tracking Scripts or Frontend Cookies: This website does not load web analytics tools (such as Google Analytics), does not embed advertising pixels, and does not set browser tracking cookies.

External Browser Requests: Pages load font stylesheets and font files from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). On the homepage, interactive portfolio demo frames pointing to live demo subdomains (*.tibibytes.com) are not loaded until you explicitly click to open a project preview.

4. How We Use Information

• To respond to inquiries, discuss project goals, and deliver the selected package.
• When hired for Gold or Platinum packages, to register and set up the client's domain name, web hosting, and professional email on Hostinger (hostinger.com).
• To manage quotes, invoicing, and Interac e-Transfer or cash payments.

We do not sell, rent, or trade contact form submissions to third parties.

5. Hosting Provider, Retention, Deletion Requests & Security Scope

Hosting & Infrastructure: Website hosting, /contact.php, the hello@tibibytes.com inbox, and Gold/Platinum domain, hosting, and email services operate on Hostinger (hostinger.com). External processing also occurs with FormSubmit (formsubmit.co) only if the emergency fallback triggers. Specific datacenter countries depend on Hostinger and (if triggered) FormSubmit infrastructure.

Retention: Inquiry emails delivered to hello@tibibytes.com, project communications/files, and business records are retained indefinitely unless deleted earlier upon request. Separately, temporary anti-spam rate-limit entries in /contact.php cover a 10-minute window and deduplication fingerprints cover a 15-minute window in server temporary storage before expiring on subsequent requests or server cleanup.

Access, Correction & Deletion Requests: To request access to, correction of, or deletion of your submitted inquiry details, email hello@tibibytes.com from the email address associated with your inquiry. Confirmed requests are processed within 5 business days.

Technical Checks vs. No Security Guarantee: Our production server rules enforce HTTPS redirects, and /contact.php strips HTML tags and header line-break/null characters, limits payloads to 50 KB, checks spam honeypot fields, and applies temporary rate limiting and duplicate checks. However, no internet transmission, web host, email service, or third-party relay (including FormSubmit) can be guaranteed 100% secure.

6. Minors & Parental Supervision

TibiBytes is operated by a 14-year-old minor with parental supervision for business administration, contracts, and financial transactions.

7. Contact for Privacy Questions

For questions about this Privacy Policy or to ask about contact details you submitted, please email hello@tibibytes.com.