01 Privacy

What this site collects, and where it goes.

This is written from the code that runs the site rather than from a template, which is why it is specific and short. If anything here does not match what actually happens, that is a bug and we want to hear about it.

LAST UPDATED


02 The contact form

What you type, and what is added.

You give us your name, and at least one of a phone number or an email address so we can reply. Everything else is optional: your business name, what you want the system to do, and your message.

Recorded alongside it, without you typing it: the page you submitted from, any campaign parameters that were in the link you arrived on, the language of the page, and the two-letter country code Cloudflare attaches to the request.

Your full IP address is not stored. It is visible to the server while your submission is being handled, where it is used to rate limit and to check the submission is not automated, and it is never written to the database. The country code is kept; the address itself is not.


03 Where it goes

Three destinations, all of them us.

A submission travels to three places, for the same reason in each case: so a person sees it, rather than it sitting in a database nobody opens.

Cloudflare D1
The database this site runs on, hosted by Cloudflare. This is the record we work from. It is not readable from the public site; the dashboard over it requires a sign-in.
A private automation server
Our own automation instance on a rented server, which alerts the founder so a message arriving at 23:00 is not discovered at 09:00. It receives the submission as you sent it.
Web3Forms
A third-party service at api.web3forms.com that turns the submission into an email notification. It receives your name, email, phone, business name, message, language, country and the page you came from.

That is the complete list. Your details are never sold, never traded, and never uploaded to an advertising platform as a customer list.


04 Cookies and tracking

What runs in your browser.

Meta Pixel
On every public page. It records that a page was viewed, and that a contact form submission succeeded, so we can tell which advertising actually reaches people. It sends no name, phone number or email address: the Meta setting that would let it read those fields off the page is switched off in this site's code, not merely in a dashboard. It sets a cookie named_fbp. As with any resource loaded from another company, Meta sees your IP address and browser details when your browser requests it. A content blocker stops it, and nothing on this site breaks if you use one.
Cloudflare Turnstile
A bot check on the contact form, loaded only once you start filling the form in. It exists so the inbox is not buried under automated submissions.
Your theme choice
Light or dark is kept in your own browser's local storage. It is not a cookie, it is not sent anywhere, and it never leaves your device.
No analytics suite
There is no Google Analytics, no session recording, no heatmap, and no advertising network other than the Meta pixel described above.

05 Your choices

Ask, and it is deleted.

Email hello@rabtlabs.comor message+964 770 235 7357on WhatsApp and ask us to delete what we hold about you. You do not need to give a reason, there is no form, and we will confirm when it is done.

You can ask for a copy of it on the same terms. It will be a short list: this is a one-person studio, not a data business.

If you would rather we never held it at all, skip the form and use the phone number or the email address directly.


06 Questions
What does the contact form collect?

Your name, and whichever of phone or email you give us. Optionally your business name, what you want the system to do, and your message. The form also records which page you submitted from, any campaign parameters in the link you arrived on, your language, and the two-letter country code Cloudflare supplies. Your full IP address is not stored: it is used while the request is being handled, to rate limit and to check the submission is not automated, and it is not written to the database.

Who else receives what I submit?

Three places, all of them so that a human at RABT Labs actually sees your message. It is stored in a Cloudflare D1 database, forwarded to a private automation server that alerts the founder, and sent to Web3Forms, which turns it into an email notification. It is never sold, never traded, and never uploaded to an advertising platform as a customer list.

Does this site track me?

There is a Meta advertising pixel on every public page. It records that a page was viewed and, if you submit the contact form, that a submission happened. It sends no name, phone number or email address: the Meta setting that would let it read those off the page is switched off in this site’s code rather than only in a dashboard. Meta receives your IP address and browser details as part of any request your browser makes to it, which is true of any third-party resource on any website. A content blocker stops it and nothing here breaks.

How do I get my information removed?

Email hello@rabtlabs.com or message +964 770 235 7357 on WhatsApp and ask. You do not need to give a reason and there is no form to fill in. We will delete the record and confirm when it is done. If you would rather we never held it at all, use the phone number or the email address instead of the form.