[ Legal — Privacy ]
Privacy Policy
We collect as little as possible, and we're upfront about it. No selling, no ad tracking, no surprises.
Effective: June 7, 2026
Who we are
UncannyDevs is an engineering studio operated by Transcend Enterprises LLC (State of Washington, United States) ("we", "us", "our"). This policy covers the information collected through our website and contact form. We don't offer accounts, logins, or payments on this site.
What we collect
Only what we need to respond to you and run the site:
- →What you submit through the contact form: name, email, and message — plus company and timeline if you choose.
- →Basic technical data: IP address, browser user agent, and request timestamps, kept in standard server logs.
- →Aggregated, privacy-friendly analytics — captured server-side, with no analytics cookies and no third-party tracking scripts. We identify visitors only by a hash that rotates daily (so you can't be tracked across days), and we send your IP address to our analytics provider to derive coarse location (country/region) — we don't store your raw IP in analytics events.
How we use it
- →Respond to inquiries and follow up about potential work.
- →Operate, maintain, and improve the website.
- →Detect and prevent abuse — spam, bots, and automated scraping — including rate-limiting and reviewing the IP address and user agent on form submissions.
- →Meet legal, accounting, and security obligations.
Who we share it with
We do not sell your data, and we don't share it with advertisers or data brokers. We use a small set of service providers to run the site, each handling data only as needed:
- →Fly.io — hosting and storage of contact submissions
- →Resend — delivering the notification email when you submit the form
- →Cloudflare — DNS, CDN, and inbound email routing
- →PostHog (United States) — server-side, cookieless analytics; receives your IP address to derive coarse location
We may also disclose information if required by law, or to protect the site, our rights, or someone's safety.
Cookies & tracking
We use only essential cookies — a CSRF token to protect form submissions, and a session cookie for admin access. No advertising, marketing, or behavioral-tracking cookies. Our analytics is server-side and cookieless, and we don't use cross-site tracking. The only JavaScript on the site is first-party UI — a mobile-menu toggle and a carousel — plus HTMX for the contact form; there are no third-party or tracking scripts.
AI & your data
We build with AI — but we don't train or fine-tune AI models on your contact submissions or any personal information you send us, and we don't share your data with anyone else for that purpose.
How long we keep it
- →Contact submissions: up to ~24 months (longer if we're actively working together). You can ask us to delete yours sooner.
- →Server logs: ~90 days, then deleted or anonymized.
- →Anonymized analytics: retained in aggregate, since it doesn't identify you.
Your rights
Depending on where you live, you can ask us to access, correct, or delete the personal information we hold about you, or to restrict how we use it. We don't sell or share personal information (relevant under California's CCPA/CPRA), and EU/UK visitors have rights under the GDPR.
To exercise any of these, just email us using the details below.
The basics
- →Children: the site isn't for anyone under 16, and we don't knowingly collect their data.
- →Security: we use HTTPS and reasonable safeguards; no method is 100% secure, and we'll notify you of a breach that affects you as required by law.
- →Location: our providers may process data in the United States and other countries.
Contact
Questions about this policy or your data? Reach us at [email protected], or via the contact page. Operated by Transcend Enterprises LLC (State of Washington, United States).