Legal
Privacy
This page sets out what this website collects and what happens to it. It is written from the database schema, so it describes what the software actually does rather than what a template asserts.
Summary
This site has no cookies, no advertising, no tracking pixels, and no third-party analytics that identify you. The only personal information it holds is what you type into the contact form, and it is used to answer you.
What The Contact Form Stores
When you send the contact form, the following is written to our database:
- Your name, as you typed it.
- Your email address, so we can reply.
- Your organisation, if you chose to give one. This field is optional.
- Your enquiry type, being the option you selected.
- Your message, between 20 and 4000 characters.
- The time you sent it.
- A two-letter country code for the country your request came from, determined by our network provider. This records the country only. It does not record a city, an address, or coordinates.
That is the complete list. The table holds no column for an IP address, a browser fingerprint, a device identifier, or a referring page, because none of those are needed to answer an enquiry.
Your IP Address
Your IP address is used for two things, and it is stored in neither of them in a form that can be traced back to you.
- Bot protection. It is sent to Cloudflare Turnstile as part of checking that a submission came from a person.
- Rate limiting. We allow 5 submissions per address per hour. To count them without keeping the address, we combine it with a secret value held on the server and store only a partial one-way hash of the result. That value cannot be reversed into an address without the secret, and it is automatically deleted after an hour.
Where It Is Stored And Sent
Your enquiry is stored in Cloudflare D1, a database that runs on Cloudflare’s network. A notification containing what you submitted is then emailed to us through Resend, an email delivery service, so we see it promptly.
The enquiry is written to the database before the email is attempted. This means that if email delivery fails, your message still reaches us and is not lost.
Analytics
We use Cloudflare Web Analytics, which counts page views without cookies and without building a profile of you. It does not follow you between sites. This is why you have not been shown a cookie banner: there is nothing to consent to.
We do not use Google Analytics or any advertising network.
Retention
Enquiries are kept while they are useful for the conversation they started and our records of it. The rate-limiting value described above expires automatically within an hour.
Requesting Deletion
Contact hello@osyracloud.com to request deletion. We will delete your enquiry and confirm that we have done so. You may also request a copy of what we hold, or ask us to correct it.
Who We Are
OSYRA is an independent technology company in the Republic of Maldives.