Privacy Policy

Lefty Software LLC ("Company," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website leftysoftware.com (the "Website") or otherwise interact with us through it.

Please read this Privacy Policy carefully. By accessing or using the Website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Website.

We may collect information about you in a variety of ways. The information we may collect on the Website includes:

Personal Data

Personally identifiable information that you voluntarily provide when you contact us. The contact form asks for, and we collect, only:

• Your name
• Your email address
• The subject and body of your message, and any other information you choose to include in it

The Website has no accounts, no sign-up, and no newsletter. We do not ask for your phone number or company name through the Website.

Automatically Collected Data

When you visit the Website, our web server records a log entry for the pages and files you request, containing:

• The date and time of the request
• Your IP address, and which part of the request it was taken from
• The page or file requested, and the HTTP method used
• The response status code and the time taken to serve the request

These entries are kept for security and diagnostic purposes: identifying faults, investigating abuse of the contact form, and understanding whether the Website is operating correctly. Because the Website is served through a content delivery network, the address recorded is the one that network reports as the origin of the request.

We do not log your browser type or version, your device, or the site you arrived from in our server logs. When analytics measurement is enabled, Cloudflare Web Analytics records an anonymous page view for each page loaded: it sets no cookies, does not track you across sites, and does not identify you or your browser. We use those aggregate counts to understand which pages are useful. We do not operate advertising or behavioural tracking on the Website, and we do not build profiles of visitors or attempt to identify you from these records.

When a submitted message is delivered, the delivery record in our server logs contains a short one-way hash of your email address (never the address itself), together with the time of delivery, so that we can confirm a message was sent if it does not reach us. Your subject line and message body are never written to our logs.

When spam protection is enabled for the contact form, a Cloudflare Turnstile token generated by your browser is submitted with your message, and that token, together with your IP address, is sent to Cloudflare for a human-verification check before the message is delivered. Submissions are also rate-limited per address to prevent abuse.

We use the information we collect for the following purposes only:

• Provide, operate, and maintain the Website.
• Respond to your inquiries and communicate with you about projects you have asked about.
• Detect, prevent, and address technical issues, spam, fraud, or illegal activity, including rate-limiting and human-verification of contact-form submissions.
• Comply with legal obligations and enforce our terms and policies.

We do not send marketing or promotional email, and we will not add you to any mailing list.

We do not sell, trade, or rent your personal information to third parties. We share it only with the infrastructure providers needed to run the Website, and in the following limited circumstances:

• Amazon Web Services (SES): Your name, email address, and message are transmitted to Amazon's Simple Email Service to deliver your inquiry to us.
• Cloudflare: The Website is served through Cloudflare's network, which handles requests and their security. When spam protection is active, form-submission tokens and IP addresses are also checked with Cloudflare's Turnstile human-verification service.
• Hosting provider: The Website runs on rented infrastructure whose operator stores the server logs described above.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
• Protection of Rights: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation in which we are involved.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

The Website does not use advertising cookies, tracking pixels, or analytics cookies of any kind. When analytics measurement is enabled, it stays cookie-free: Cloudflare Web Analytics runs a small script that records an anonymous page view, sets no cookies, stores nothing in your browser, and does not identify you.

The Website stores a single preference in your browser's local storage, under the key lefty-theme-preference, which records whether you have chosen light or dark mode. This value never leaves your browser, is not transmitted to us, and is not used to identify you. You can clear it at any time through your browser's settings for site data.

For faster back and forward navigation, htmx stores non-contact page snapshots in session storage. Contact pages are excluded so submitted personal information and spam-verification tokens are not saved in those snapshots. Session storage is cleared when the browser tab is closed.

We use commercially reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, use, alteration, and disclosure. These measures include encryption in transit, secure servers, and access controls.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You acknowledge that you provide your personal information at your own risk.

We will retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, whether we can achieve those purposes through other means, and applicable legal requirements.

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain exceptions.
• Right to Restrict Processing: You may request that we restrict the processing of your personal information under certain circumstances.
• Right to Data Portability: You may request that we transfer your personal information to another organization or directly to you, where technically feasible.

We do not send marketing email, so there is no marketing subscription to opt out of. To exercise any of the rights above, please contact us or email [email protected]. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

The Website may contain links to third-party websites, services, or content that are not owned or controlled by Lefty Software LLC. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services.

We encourage you to review the privacy policy of every site you visit. Your interactions with third-party websites are governed solely by those third parties' privacy policies.

The Website is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under the age of 13 without verification of parental consent, we will take steps to remove that information from our servers. If you believe we may have collected information from or about a child under 13, please contact us.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Website after any changes to this Privacy Policy constitutes your acceptance of those changes.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us or email [email protected]. We will make every effort to respond to your inquiry in a timely manner. Security researchers can reach us through the channel listed at /.well-known/security.txt.