Privacy
This notice covers contact inquiries and information used to provide your client area.
Updated October 21, 2026
Contact Inquiries
The form collects your name, email address, subject, and message, plus a phone number if you choose to provide one. Christopher Todd uses this information to respond to your inquiry.
Delivery and Storage
Your message passes through this website’s server and FormSubmit before reaching Christopher Todd’s email inbox. The website does not keep a separate submission database.
Delivered messages remain in the receiving email account. FormSubmit’s archive period does not determine how long those emails are retained.
FormSubmit states that it retains submissions for 30 days. See its documentation and privacy notice for its handling of information. Hosting and email providers also process technical information needed to operate their services.
Client Access
The client area supports ChatGPT sign-in and this site’s own email code, email link, and password sign-in. When you use ChatGPT, this website receives your account identifier for this site, email address, and name when available. It does not collect your ChatGPT password.
Christopher stores your account name, sign-in and contact email addresses, linked account identifiers, and any profile details provided, such as your phone number, job title, department, organization, and time zone. Profile photos are kept in hosted file storage. The hosted database also holds private content, organization and workspace memberships, roles, and access assignments. These records provide and manage client access.
Sign-In and Account Security
If you set a password for this site, the account system stores a one-way hash rather than the password itself. Email sign-in codes and sign-in link tokens are also stored as hashes. If you enable an authenticator, its setup secret and recovery codes are stored in encrypted form.
Email sign-in uses cookies to keep you signed in. Server-side session records include your account identifier, sign-in and expiry times, IP address and browser information when available, and verification status. The account system also keeps verification and recovery records, request counts used to limit abuse, invitation and email-delivery records, and a history of account and access changes.
Account invitations, sign-in codes, verification links, and recovery messages are sent through Resend. This is separate from contact-form inquiries, which use FormSubmit as described above.
Access and Retention
Clients can see only private content they have been given access to. Christopher manages client access and private content. Signing in alone does not grant access to private content.
Information entered in your client area is stored with a history of changes. Christopher can review and manage that information. Removing an item from a workspace does not immediately remove its change history.
Client records and private content remain until removed by Christopher. Pausing access or removing an assignment blocks future access; it does not delete the underlying content.
Email sign-in codes and sign-in links expire after ten minutes. Email sessions normally expire after seven days and can be renewed as you use the site. You can sign out or end other email sessions from Security & Sign-In. Expiry or revocation prevents further use of the affected credential or session; it does not mean that all related account, recovery, delivery, or change-history records are immediately deleted.
Appearance
The site follows your device’s appearance setting by default. The appearance control lets you choose System, Light, or Dark. Your choice is saved in this browser’s local storage and is not sent to the server.
Questions About Your Information
To ask about your information, or to request its correction or deletion, use the contact form and select General Correspondence.