Privacy Policy

This policy explains what information Relic Wreckers collects through relicwreckers.com, why we collect it, and what we do with it. It covers the public website, the inquiry form, and the private concept portal we use to share design work with prospective clients.

We are a small digital agency. We collect very little, we do not run advertising, and we do not sell or rent anyone's information.

The inquiry form. When you send us a project inquiry, you choose what to include. The form asks for:

• your name and company
• the address of your current website
• your phone number and email address
• what you need help with (website, business application, or rebrand)
• how you would like us to reach you (phone call, email, or text)
• any notes you add

Only a name and an email address are required. Everything else is optional and helps us prepare a better first conversation.

The concept portal. To open a concept we have prepared for your business, you enter a six-digit access PIN that we give you. The PIN identifies the business the concept was made for; it does not collect anything else about you.

IP address, for abuse prevention only. When you submit the inquiry form or enter a PIN or password, our server reads the IP address of the request to limit how many attempts one connection can make in a short window. We store a shortened cryptographic hash of the address, not the address itself, together with a small counter. These records exist to stop automated abuse and are not used to identify or profile visitors.

Hosting logs. Our hosting provider may keep standard request logs (such as IP address, browser type, requested pages, and timestamps) as part of operating the service. We do not add our own visitor logging on top of that.

What we do not do. This site has no analytics scripts, no advertising pixels, no social-media trackers, no session recording, and no fingerprinting. It does not store anything in your browser's local storage. The fonts are served from our own site, so opening a page does not send a request to a font network.

We use what you send through the inquiry form to:

• respond to you about your project, in the way you asked us to
• research your business and current website so we can prepare a concept
• keep a record of the conversation while a potential engagement is open
• protect the site from spam and abuse

We do not use inquiry information for marketing lists, and we do not send newsletters. If you hear from us, it is because you asked us to get in touch.

When you submit the form, our server checks the required fields, trims each field to a reasonable length, and sends the inquiry to our inbox as an email through Resend, an email delivery service. The email uses your address as its reply-to so we can answer you directly. Resend processes the message on our behalf and keeps its own delivery logs under its own privacy terms.

The form also contains a hidden field that people never see or fill in. Automated bots often fill every field they find; submissions with that field filled are discarded without being delivered.

We set cookies only for the private concept portal, and only after you sign in. They are essential to that feature: without them the portal cannot tell that you are allowed to see a concept.

• rw_c — set when you enter a valid client PIN. It holds a hashed access token tied to the business the concept was made for, not the PIN itself. It lets you open that concept for up to 30 days.
• rw_a — set when we sign in to the admin area with the admin password. It holds a hashed token, lasts up to 30 days, and is not set for visitors or clients.

Both cookies are marked HttpOnly (scripts in the page cannot read them), SameSite=Lax, and Secure on the live site. Choosing Sign out in the portal removes them. Nothing else on this site sets a cookie, and we use no analytics, advertising, or tracking cookies. Because every cookie we set is strictly necessary for a feature you chose to use, we do not show a cookie consent banner.

Concepts we prepare for prospective clients live in a private area of this site, not in any public folder. A concept is delivered only to a browser that has signed in with the matching PIN, and only the concept page and the files it needs are unlocked by that PIN. Research notes, proposals, and other working documents are available only to us.

Concept files are sent with instructions that tell browsers not to cache them and tell search engines not to index them. A PIN is issued to one business; please do not share it outside that business. We can change or revoke a PIN at any time.

We rely on a small number of providers to run this site. Each processes data only to provide its service to us:

• Vercel — hosts the website and runs the server code behind the inquiry form and the concept portal. It may keep request logs, and it stores the small rate-limiting counters described above.
• Resend — delivers inquiry emails to our inbox.

We do not share inquiry information with advertisers, data brokers, or anyone else for their own purposes.

Inquiry emails stay in our mailbox for as long as we need them to respond to you and to follow up on a potential engagement, and then for a reasonable period afterwards as ordinary business records. Rate-limiting counters cover short windows (fifteen minutes for sign-in attempts, one hour for form submissions); the stored counter may persist in storage until it is overwritten, but it holds only a hashed address and a number. Concept access cookies expire after 30 days or when you sign out. Our providers keep their own logs for the periods described in their policies.

The live site is served over HTTPS. Portal credentials are checked with constant-time comparisons, sign-in attempts are rate-limited and slowed after a failure, session cookies hold hashed tokens rather than credentials, and private concept files are never placed in a public folder.

No website can promise perfect security, and we do not. Please do not send passwords, payment details, or other sensitive personal information through the inquiry form; it is meant for a description of your project.

Beyond the providers above, we would disclose information only:

• if a law, regulation, subpoena, or court order requires it
• to protect the rights, safety, or property of Relic Wreckers, our clients, or the public
• as part of a sale or transfer of the business, in which case this policy would continue to apply

You decide what to put in the inquiry form, and you can ask us to correct or delete the information you sent us at any time. You can also ask what we hold about you. We will honor reasonable requests promptly; there may be information we need to keep for legal or record-keeping reasons, and we will tell you if that is the case.

Signing out of the concept portal removes its cookie. You can also clear cookies for relicwreckers.com in your browser at any time.

This site is for businesses and the adults who run them. It is not directed to children, and we do not knowingly collect information from anyone under 16. If you believe a child has sent us information, contact us and we will delete it.

If we change how the site handles information, we will update this page and its effective date. Continued use of the site after a change means the updated policy applies.

Questions about this policy, or a request about your information, can be sent through the inquiry form at relicwreckers.com. Put “privacy” in the notes so it reaches the right person.

Relic Wreckers serves the Southeast from Nashville, North Carolina and Jacksonville, Florida.