Security statement.
This website
- HTTPS only, modern TLS.
- No accounts, no payments, no stored personal data — nothing here to take.
- First-party code only; client sites ship the same way unless their needs demand otherwise.
Client work
Credentials you share live in a password manager, never in chat threads or spreadsheets, and are purged at handoff. Invoices come from our named billing address. We never ask for card numbers over WhatsApp or the phone.
Care Plan hosting
Static-first infrastructure with a tiny attack surface, automatic TLS, and monthly backups retained for a year. Boring on purpose — exciting hosting is a problem you pay for twice.
Reporting
security@springwebdesigner.com — acknowledged within 48 hours.
Common questions
What does this website store about me? Nothing on our servers. Your theme choice and accessibility settings stay in your own browser and are never sent to us.
How should I send logins or other credentials? Never in a chat thread, email body or spreadsheet. Ask us for the secure method for your project; credentials live in a password manager and are purged at handoff.
Will you ever ask for card numbers over chat or email? No. Invoices come from our named billing address.
How do I report a vulnerability or a suspicious message that claims to be from us? Write to security@springwebdesigner.com. We acknowledge within 48 hours.
How often is this statement reviewed? Quarterly, as shown at the top of the page.