Privacy

What the public site tracks

This site does not run an analytics tag, advertising pixel or third-party tracking script, and it does not set its own cookies. Firebase Hosting and the Google infrastructure behind it process ordinary network and server information needed to deliver and protect the site.

What is stored when you send the teardown form

The endpoint stores the name, email, business or project name, public link, selected goal, details and language preference you submit. It also stores the page locale, submission source, status, time, a pseudonymous client key, the browser user-agent string and the referring page when available.

We use the record to review the request, reply to you and maintain the status of the enquiry. We do not sell it or add the address to a marketing list. The endpoint stores the submission in this website’s Firebase project. It does not email the form contents or call an external form service.

How the anti-abuse record works

The endpoint derives a shortened SHA-256 hash from the connection’s IP address. Our code does not write the raw IP address into the teardown record. It stores the pseudonymous key with the submission and uses the same key as the identifier for a separate rate-limit record.

The rate-limit record stores the start of the current ten-minute window and a request count. The application does not currently apply an automatic deletion period to that record. The service also writes operational logs about submission success or failure. These can include the selected goal and locale, and the pseudonymous key when a request is rate-limited.

How long the data is kept

The current implementation does not enforce a fixed automatic deletion period for teardown submissions or rate-limit records. Email hello@the10thfloor.co to request deletion of a submission. Include the email address used on the form so the record can be found. We will confirm after the request has been handled.

Links and the calendar

Links to email, WhatsApp, social profiles, app stores and client websites open services run by other organisations. The Cal.com booking frame loads only after you choose to open it. Those services apply their own privacy terms to activity on their sites.

Data inside an engagement

Access to client systems, accounts, customer records or analytics is governed by the relevant engagement agreement and access controls. It is outside this public-site notice. Client accounts, domains and business data remain client property.

Contact

Questions or deletion requests: hello@the10thfloor.co.