Privacy

The short version

This site runs no analytics, sets no advertising or tracking cookies, and loads nothing from a third-party server — no tag manager, no pixels, no embedded fonts fetched at page load. Typefaces are served from our own domain. If you read this site and never contact us, we hold nothing that identifies you beyond ordinary server logs.

When you do get in touch, we keep what you sent us so we can answer it.

Who we are

Voff Digital LLC operates voff.digital and is responsible for the personal information described here. We are a Florida limited liability company in the United States, and the servers holding this data are in the United States. Reach us at hello@voffdigital.com.

If you are writing to us from outside the United States, your information is transferred here to reach us. There is no way around that — the inbox is here.

What we collect

When you use a form

The contact form collects your name, your email address and your message. The project enquiry form additionally collects your company, your website, the kind of project, a budget range, a timeline and your brief. We collect these because you typed them in order to hear back from us, and we use them for that and nothing else — no newsletter, no list, no resale.

If you have a client account

Clients with access to the portal have an account holding a name, an email address, a hashed password and, if enabled, two-factor authentication settings. We never store a password in a form we can read.

Server logs

Our web server records requests in the ordinary way: IP address, timestamp, the page requested, and the browser's user-agent string. These exist to keep the site working and to investigate abuse. They are not joined to anything else and are not used to build a profile of you.

Cookies

Two, both strictly necessary, both first-party:

• XSRF-TOKEN — protects forms against cross-site request forgery.
• voff-digital-session — keeps your session while you are on the site, and signs you in to the portal.

Both expire after two hours. Neither is used for analytics or advertising, which is why this site has no cookie banner: there is nothing to consent to beyond the cookies that make it function.

Who else sees it

Three, and only for the job named:

• Sendwax — delivers our email. It is our own product, run on our own infrastructure, which is worth saying plainly: your message does not pass through a marketing platform on its way to us.
• Stripe — processes payments for clients who are billed through the portal. Card details go to Stripe directly and are never held by us.
• DigitalOcean — hosts the server the site runs on.

We do not sell personal information, and we do not share it for advertising.

How long we keep it

Enquiries stay in our email for as long as the conversation is useful, and we delete them on request. Client account and billing records are kept while the account is active and afterwards for as long as tax and accounting obligations require. Server logs rotate on the server's ordinary schedule.

Your rights

You can ask what personal information we hold about you, ask us to correct it, and ask us to delete it. Write to hello@voffdigital.com and we will answer within 30 days.

We offer those rights to everyone who asks, not only to people a statute covers. A studio this size is below the thresholds of the US state privacy laws that would otherwise compel it, and we would rather not make the distinction.

If you are in the UK or the EU, the GDPR gives you those rights plus the right to object to processing and to receive your data in a portable form, and you may complain to your local supervisory authority.

Changes

If what we do with data changes, this page changes with it and the date at the top moves. We do not backdate it.