A deliberately small data footprint.

Data collection

The current static site does not send contact form submissions to a server. After client-side validation, the form opens a local email draft only after explicit user action.

Cookies and tracking

No analytics, advertising pixels or third-party tracking scripts are included. GSAP is loaded as a presentation library from jsDelivr; it does not require account data.

Third-party services

If analytics, CRM, chat, booking or form-processing tools are added later, this policy and the site Content Security Policy should be updated before deployment.

Security

The project includes restrictive browser security headers, local media assets and no client-side secrets. Hosting, DNS, deployment accounts and any future backend require their own security controls.

Contact

For privacy questions, email hello@zonexdev.com.