Privacy, in plain language.

Project enquiries and Contact

Project intake and the short Contact form send only when you review the information and choose to submit. Contact details and the message are used to respond to your enquiry. Submission does not subscribe you to a marketing list.

The Worker validates submissions, checks Cloudflare Turnstile, and sends transactional email through Resend. Contact and project-intake submissions are not saved in an application database. Resend processes the information needed for email delivery, and the delivered email remains in the recipient mailbox.

IDE messages and Emergency Fix requests use the same contact delivery service. Formspree is no longer an application processor for new submissions.

Optional drafts on your device

Intake answers and contact details stay in page memory by default. The optional Remember in this tab control writes your draft to session storage on this browser, with a fixed 24-hour expiry. Saving is explicit and can be turned off. A saved draft must be restored and reviewed before submission.

You can download or import a draft file, or delete the saved copy using the draft controls. Downloaded files may contain your answers and contact details; keep or delete those files yourself. Storage can be unavailable in some browsers, and the interface reports saving or deletion failures rather than claiming success.

Expired drafts are rejected when the site next reads them. Browser storage is not a secure vault and may be accessible to other people using the same browser session. Private answers are not put in navigation URLs or sent to analytics.

The local Project Scoper

The public Scoper uses visible rules in your browser to suggest a project direction. It does not contact an AI service, open an Advisor API session, or record funnel analytics. You can change the suggestion before carrying it into the project intake.

Scoper and intake share an in-memory draft while you navigate. Saving that draft or exporting it requires your choice. A suggestion is guidance, not a quote or a delivery commitment.

Existing Advisor records

The earlier Advisor service remains available for existing integrations and previously collected data. Its records can include categorical answers, sanitized optional details, submitted contact information, first-touch attribution, consent, assessments, and random operational identifiers. The public Scoper no longer creates these records.

Earlier optional details are sanitized before storage, with obvious email addresses and phone numbers redacted, control characters removed, and a 500-character limit. Workers AI remains disabled in production. Any future re-enablement requires the existing consent and redaction review; contact fields and optional free text remain excluded by default.

Earlier Advisor telemetry uses bounded event types without free text or contact details. It does not create a long-lived cross-session visitor ID. Trusted result events require a completed submission.

• Incomplete anonymous sessions and related data: 30 days.
• Analytics events and anonymous visitor records, if used: 13 months.
• Spam leads, provider-call records, and notification operational records: 90 days.
• Completed Advisor leads, answers, and results: 24 months after last activity.
• Queue messages follow Cloudflare platform retention; D1 remains the earlier service’s operational source of truth.

Security and third-party resources

Cloudflare hosts the site and API, and Turnstile processes technical request information to help prevent spam. Application logs exclude contact fields, optional details, prompts, generated prose, and raw IP addresses. Operational records use status, latency, notification state, and stable error codes.

The site loads Google Fonts. Some existing IDE features use public GitHub APIs and Spotify. These resources can send normal browser request metadata to their providers when loaded. Cloudflare provides hosting, API, abuse-prevention, database, queue, and log infrastructure; Resend delivers transactional email.

Cloudflare Web Analytics measures page views and page speed for the site. It does not use cookies or local storage and does not follow you across sites.

Your choices

You can leave optional fields blank, use the local Scoper without submitting, and keep drafts only in memory. For access, correction, deletion, or privacy questions, contact contact@mroot.co. Associated service records can be removed or anonymized unless retention is legally required.