Custotal

Legal This website

Privacy Policy

This website is a static page hosted on Cloudflare Pages. It sets no cookies, has no backend and shows only mock data — so there is no customer or business information here to collect. The only measurement is Cloudflare’s cookieless, aggregate page-view count, which identifies no one.

Last updated

No cookies
This site sets no cookies and writes nothing to your device. There is no consent banner because there is nothing to ask you about.
No backend
Every page is pre-rendered HTML, CSS and a small progressive-enhancement script. There is no application server, API or database behind this site.
Mock data only
Every name, account and figure is seeded sample content. No real customer, prospect or business data is involved anywhere on this site.
Cookieless analytics
Cloudflare Web Analytics counts page views at the edge. It sets no cookies, tracks no individual and builds no profile.

01 Controller

The controller responsible for this website is:

Orbivort · the Custotal maintainers
Contact: github.com/orbivort/custotal/issues

02 Scope

This policy covers this website only. Custotal itself is self-hosted software that runs on the operator’s own infrastructure: when a team deploys it, that team is the controller of everything inside its instance, and none of it reaches this site. There is no hosted Custotal service to sign up for, and no customer record is ever sent here.

03 No cookies and no client-side tracking

This website sets no cookies and stores nothing on your device. Specifically, it:

  • sets no first-party or third-party cookies;
  • uses no localStorage, sessionStorage or IndexedDB to identify you;
  • loads no advertising, remarketing or A/B-testing scripts, and no cookie-based or cross-site analytics;
  • runs no device fingerprinting and makes no attempt to recognise you across visits;
  • offers no account, registration, newsletter or contact form.

The only JavaScript the site ships itself is progressive enhancement: it reveals sections on scroll, pins the header, opens the mobile menu and copies a deploy command to the clipboard. It toggles classes and attributes in the page you are already reading, and transmits nothing. The analytics beacon is injected by Cloudflare at the edge rather than written into the site — see section 07 below. With JavaScript disabled the page is still complete.

04 Mock data only

Every name, account, amount and workspace view on this site is seeded mock data — sample content written to demonstrate the product. “Riverside” and “$48,000” are illustrations, not real records. No real customer, prospect, employee or company data is collected, stored or displayed anywhere on this site.

The live demo is the same static interface published as a bundle running on a seeded mock workspace. There is no backend behind it: anything you type into the demo stays in your browser and is discarded when you close the tab.

05 No backend

This website is a static build. astro build emits plain HTML, one stylesheet, the self-hosted font files and a small script — nothing else. There is no application server, no API and no database behind it, and no server-side process of ours handles your visit.

Because there is no backend, there is no account to create, no session to maintain and no stored record to breach. Nothing you do on this site is written to a system we control.

06 Hosting — Cloudflare Pages

This website is hosted on Cloudflare Pages, a service provided by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA).

When you visit this website, Cloudflare processes the following data as a data processor on our behalf:

  • your IP address;
  • request headers (browser type, operating system, referrer URL);
  • the date and time of access;
  • the pages accessed.

This data is processed for the purpose of delivering the website content to your browser, ensuring security and maintaining service stability. Cloudflare’s processing is governed by its Privacy Policy and our Data Processing Agreement with Cloudflare.

Legal basis: Article 6(1)(f) GDPR — the legitimate interest in operating, delivering and securing this website.

The live demo is published to GitHub Pages and is likewise a static bundle; GitHub, Inc. processes the technical data involved in serving it.

07 Web Analytics — Cloudflare Web Analytics

We use Cloudflare Web Analytics, a privacy-first analytics service that does not use cookies or any client-side tracking. It collects aggregated, anonymised data at the edge (CDN level), including:

  • page-view counts;
  • referrer domain;
  • user agent (browser type);
  • country-level location (derived from IP, not stored).

No individual visitor is identified or tracked across sessions. The data is used solely to understand general usage patterns and to improve the website.

Legal basis: Article 6(1)(f) GDPR — the legitimate interest in analysing website usage without compromising visitor privacy.

08 Fonts

The IBM Plex family is self-hosted from this origin: the woff2 files ship with the site and are served from the same domain. No Google Fonts or other font service is contacted, and nothing is disclosed to a third party to render the type. IBM Plex is used under the SIL Open Font License 1.1.

09 External links

Some links lead away from this site. They point to:

Once you follow one of these links you are on a third party’s site, and that provider is responsible for its own data processing. Its privacy policy applies.

10 Your rights under the GDPR

We process no personal data ourselves, so there is normally nothing for you to access, correct, delete or export. Should Cloudflare hold request logs that relate to you, you have the following rights under the General Data Protection Regulation:

  • Access (Art. 15 GDPR): confirmation of whether personal data concerning you is processed, and a copy of it.
  • Rectification (Art. 16 GDPR): correction of inaccurate personal data.
  • Erasure (Art. 17 GDPR): deletion of your personal data.
  • Restriction of processing (Art. 18 GDPR): restriction of processing in certain circumstances.
  • Data portability (Art. 20 GDPR): transfer of the data you provided in a structured, commonly used format.
  • Objection (Art. 21 GDPR): object to processing based on legitimate interests.

To exercise any of these rights, open an issue at github.com/orbivort/custotal/issues and we will address your request promptly.

11 Right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EEA member state of your habitual residence, place of work or the place of the alleged infringement.

12 Changes to this policy

Any change to this policy will be posted on this page with a new revision date. Because the site collects no personal data, we do not expect substantive changes; if a feature that processes personal data is ever added, this page will be rewritten before that feature ships.

13 Contact

Questions about this policy or about how this website handles data are welcome at github.com/orbivort/custotal/issues .

Every claim on this page can be checked against the site’s own source, which is public: github.com/orbivort/custotal-website . The only measurement is Cloudflare’s aggregate page-view count — there is no visitor-level profile to take on trust, because none is built.