What this site
knows about you

What I collect

• When you send a tray I get the parts you picked, your email, your name if you filled it in, and whatever you typed in the note. That is the entire record.
• The brief form saves your use case, the budget you slid to, the priorities you ticked, your name and your email. The priorities arrive as the note on my copy of the spec, which is the only place they land.
• Your card number goes to Stripe and I never see it: the payment link I email you opens a Stripe page on Stripe's own domain. What comes back to me is your email, the shipping address you typed there, and the amount, because I need those to pack and label the box.
• Cloudflare sits in front of the site and the app keeps request logs: IP address, the page, the time, the browser string. I read them when something is broken.
• The tray form and the spec form hold your IP address in the server's memory for ten minutes and count the sends against it, which is what stops a script from filling my inbox. That count is never written to disk and a restart forgets it.
• Page views are counted by Umami, which runs on my own server. It sets no cookies, keeps no identifier for you, and cannot follow you off this site. Whatever is set here, a browser asking for Do Not Track gets no measurement at all: the loader checks that first and stops before any script is fetched.

Your tray is not on my server. The parts you set aside live in your own browser under the sullypc-tray key, and if you answer the analytics bar that answer sits beside it under sullypc-consent. Clearing site data empties both, and nothing is held for you until I send a payment link.

How I use it

To answer you, to send you the test log, to pack the box and put the right address on it, and to keep my books straight at tax time. That is the list.

I do not sell it, rent it, or trade it. There is no advertising pixel on this site and no mailing list to end up on. The site emails you five things and nothing else: the confirmation of the tray or the spec you just sent, the payment link when I make it, a note if that link runs out before you have used it, and the tracking number when the box goes out. Everything past that is me typing a reply.

Who else sees it

• Stripe takes the payment and sends the receipt, so they hold the card and the billing details under their own privacy policy. The shipping address you type on their page is also what they work the sales-tax rate out from, which is why that field is asked for before the total is final.
• Cloudflare carries every request to the site, which means they see the traffic and the IP addresses in it.
• Resend puts those five emails on the wire for me, so they handle your address and what the message says. Replies to [email protected] land in my own mailbox.
• I reply by hand from my own email account, so our thread sits with my email provider the same as any other email you send a person.
• Your request pings my phone through ntfy, which runs on my own server. The push carries your email and the list you sent, so I can see what came in without opening a laptop.
• Umami counts the page views, self-hosted on the same server as the shop, so those counts do not leave my hardware either.

That is the whole list. No data broker, no ad network, no third-party CRM. The typefaces, the stylesheet and the scripts all come from this site, so loading a page here does not quietly call a font or a CDN somewhere else.

How long I keep it

Orders stay for seven years, because a receipt is tax paperwork and I do not get to delete those. Requests and specs that never became an order I clear out once a year. Server logs are capped at the last 50 MB of requests and the oldest go as new ones arrive, which at the traffic this site gets is a few weeks; Cloudflare keeps its own on its own schedule.

While I have it, it sits on a server I run and pay for myself. Cloudflare stands in front of the shop, the admin side answers only over my own private network and is not on the public internet at all, and no card number ever reaches it, because the paying happens on Stripe's page. If anything I hold about you is ever taken, I write to you and tell you what it was, as soon as I know.

Your choices

Ask me what I have on you and I will tell you, and send a copy if you want one. Ask me to delete it and I will, except for a receipt I have to keep, in which case the receipt stays and the rest goes.

You can also skip the tray entirely: ask me about a part in an email and buy it the same way, and the only record is the email thread.

Email [email protected] with what you want, or send it through the Talk to Andrew form with the word privacy in the note, or reply to any email I have sent you. I answer these myself, usually the same evening and within two days at the latest.

Children

This is a shop for adults buying computer hardware. It is not aimed at anyone under 13 and I do not knowingly keep anything from a kid. If a parent tells me their child sent a request, I delete it and reply to the parent.

Accessibility statement

I build this site to meet WCAG 2.2 level AA. In practice: every page starts with a skip link to the main content, the drop-downs in the header open from the keyboard with the caret beside each one, the rows on the bench page open with Enter, and the tabs on a listing and the six steps on the how I test page move with the arrow keys. Form fields have labels tied to them, and the text is set to meet the WCAG AA contrast minimums against what sits behind it. Each photo carries the description I wrote for it, or the listing title when I have not written one yet. The NOW TESTING ticker and the rotating case on the builds page each have a pause button, and if your system asks for reduced motion nothing moves at all.

I check every page by hand, from the keyboard and at phone width as well as on a laptop. That catches a lot and it is not everything, so there will be gaps I have not found. If something on this site blocks you, tell me the page and what you were using to read it and I will fix it. While the fix is in progress I will send you the same thing by email instead: the test log, the specs, the price, whatever you were after.

Report a barrier to [email protected], or through the Talk to Andrew form. Put accessibility in the subject or the note so it goes to the top of my pile.

Changes to this page

If any of the above stops being true I change this page and move the date at the top.