Legal

Privacy Policy

Last updated: September 3, 2026

This policy explains what personal data FULLSTACK EVOLVED LLC ("FullStackEvolved", "FSEVO", "we") collects when you use fullstackevolved.com, buy a template, or hire us, and what we do with it. We are the data controller. Our registered office is in Davenport, Florida, United States, and you can reach us at hello@fullstackevolved.com.

The short version: this is a static website. We run no analytics scripts, no advertising trackers, and no newsletter. We only receive personal data when you send it to us on purpose, by writing to us or buying something.

1. Data we collect and why

  • Contact form: Your name, email address, and message. We use them to reply to you. The form is delivered to our inbox by Web3Forms. Legal basis: taking steps at your request before a contract, and our legitimate interest in answering enquiries.
  • Email: Anything you send to hello@fullstackevolved.com, including support requests. We use it to help you. Legal basis: performance of a contract and legitimate interest.
  • Template purchases: Checkout runs on Gumroad, which collects your payment details under its own privacy policy. We receive your name, email address, order reference, and what you bought. To deliver the template we also need the email or GitHub username to invite to the private repository. Legal basis: performance of a contract, plus our legal duty to keep sales records.
  • Custom projects: Contact details, business details, and any material you share so we can scope and deliver the work. Legal basis: performance of a contract.
  • Server logs: The site is hosted on GitHub Pages. GitHub may log the IP address of visitors for security purposes under the GitHub Privacy Statement. We do not have access to per-visitor logs.
  • Web fonts: Two typefaces load from Google Fonts. When a page loads, your browser requests the font files from Google's servers, which means Google receives your IP address and browser details. Legal basis: legitimate interest in consistent rendering.

We do not run Google Analytics, Plausible, or any other analytics script. We do use Google Search Console, which shows us aggregate search statistics and never identifies individual visitors.

2. Cookies

The site sets exactly one first-party cookie, fsevo_lang, which remembers whether you prefer English or Spanish. It expires after one year, contains no identifier, and is never sent to anyone else. It is strictly necessary for the language switcher to work, so no consent banner is needed. Third-party sites you reach from ours, such as Gumroad checkout or GitHub, set their own cookies on their own domains.

3. Who we share data with

We never sell personal data and we do not share it for advertising. We share it only with the service providers that run parts of the site or the business, and only as far as needed:

  • Web3Forms — forwards contact form submissions to our inbox.
  • Gumroad — payment processing and order records for template sales.
  • GitHub — hosts the site and the private repositories through which templates are delivered.
  • Google — serves web fonts and provides Search Console statistics.
  • Our email provider — stores the messages you send us.

We may also disclose data when the law requires it or to protect our rights.

4. How long we keep data

  • Enquiries that do not lead to a purchase or project: up to 24 months, then deleted.
  • Purchase and project records: as long as the customer relationship lasts, plus the period required by US tax and accounting law (generally 7 years).
  • Support correspondence: for the life of your support entitlement plus 12 months, so we can follow up on past issues.

5. International transfers

We are based in the United States, and so are our providers. If you are in the EU, EEA, UK, or Switzerland, your data is transferred to the US when you contact us or buy from us. Our providers rely on the EU-US Data Privacy Framework, standard contractual clauses, or equivalent safeguards. You can ask us for details.

6. Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you and receive a copy of it.
  • Correct inaccurate data or complete incomplete data.
  • Ask us to delete your data, subject to records we must keep by law.
  • Restrict or object to processing based on legitimate interest.
  • Receive your data in a portable format.
  • Withdraw consent at any time, where consent is the legal basis.
  • Lodge a complaint with your local data protection authority.

California residents have similar rights under the CCPA/CPRA. We do not sell or share personal data as those terms are defined there. To exercise any right, email hello@fullstackevolved.com. We answer within 30 days and never charge for a reasonable request.

7. Security

The site is served over HTTPS. Purchase data stays inside Gumroad's systems. Repository access is granted per buyer and can be revoked. No method of transmission is perfectly secure, so we cannot guarantee absolute security, but we take reasonable measures to protect your data.

8. Children

The site and our products are not directed at anyone under 16, and we do not knowingly collect data from them. If you believe a child has sent us personal data, email us and we will delete it.

9. Changes to this policy

We will update this page whenever our data practices change, for example if we ever add analytics or a newsletter. The date at the top shows the latest version.

10. Contact

For any privacy question or request: hello@fullstackevolved.com. See also our Terms of Service.