Project inquiries
The form asks for your name, email address, and a description of the help you need. Business name, website, service, budget, and timing are optional. The information is used to consider and respond to the inquiry. Please do not include passwords, payment information, or sensitive personal information.
We use Resend to send inquiry notifications and confirmation emails, and a Porkbun-hosted business mailbox for correspondence. The form reports success only after Resend accepts the business notification; this does not guarantee delivery to an inbox. If we cannot confirm acceptance, the form keeps your entries so you can retry or email us.
Resend stores customer data in the United States. Its current Free plan retains email and log data for 30 days, with backups retained for seven days. See Resend’s data practices and Porkbun’s data processing terms.
Abuse protection and hosting
Netlify hosts the website and processes requests, including form submissions. Cloudflare Turnstile helps protect the inquiry form against automated abuse. It loads when the form is available and verification is configured. These services process technical information such as IP addresses, browser and device signals, and the website origin for delivery and security. See Netlify’s privacy notice and Cloudflare’s Turnstile privacy notice.
To limit duplicate and abusive emails, we also keep keyed hashes of contact and submission details, timestamps, counters, and delivery receipt flags in Netlify storage. These abuse-control records contain no readable email addresses or inquiry text.
Measurement and preferences
We use Umami Cloud for basic page counts, interest in service pages, and a count when our server accepts an inquiry. These counts help us understand which parts of the website are useful. When enabled, measurement runs without analytics cookies. You can exclude your visits using the control below. We also honor Global Privacy Control and Do Not Track when your browser makes those signals available.
Our analytics requests contain only the public website identifier, our website hostname, an approved page path, and, for an accepted inquiry, a fixed event name. They exclude inquiry fields, email addresses, URL queries, fragments, and referrer details. Umami still receives technical request information, such as your IP address and browser information, and may derive approximate location and visit statistics. See Umami’s privacy notice.
When enabled, analytics uses our selected US (Oregon) storage region. Our plan provides six months of analytics history. Other processing can occur outside that region, and backup copies may remain longer. See Umami’s Cloud FAQ for storage, processing, and backup details.
Your analytics choice and color theme are saved in this browser’s local storage. They do not contain a visitor identifier. You can change the theme using the footer control or clear these preferences through your browser settings.
Access, retention, and questions
For inquiries that do not become projects, our policy is to review and delete inquiry emails 90 days after our last contact. We do this through a manual mailbox review. Project records follow the arrangements agreed for that project. Older abuse-control receipt records are removed when later inquiries are processed, rather than by an automatic deletion timer. Service providers may retain separate delivery logs and backups under their own policies.
To ask about information you have shared with us, email hello@nopalworks.com.
Last updated: October 31, 2026.