What this site collects

No cookies, no tracking

This site sets no cookies of any kind. It loads no analytics, no advertising pixels, no session recording, no A/B testing, and no social media embeds. Nothing here follows you to another website, and nothing builds a profile of you. There is no cookie banner because there is nothing to ask permission for.

No accounts, and no record of your visit

There is no sign-up and no login. Nothing you do here is written to a database, because this site has no database. The pages you read are generated fresh for each request and then forgotten.

Your cart stays in your browser

When you add something to a cart, it is written to sessionStorage in this browser tab and nowhere else. Not in a cookie, not in a session on our side, not on our server — adding something does not send a single request. Your browser discards it when you close the tab, and a different tab starts empty.

sessionStorage is not a cookie: it is never attached to a request, so it cannot be read by us in passing or by anyone else at all. What it stores is product names and numbers, which is the same thing that used to sit in the address bar.

The one moment your cart leaves this browser is when you press checkout, described next.

The one script this site runs

One file — /scripts/cart.js — keeps the cart described above. It is served from this domain, it is the only JavaScript on the site, and the site's content security policy permits no other: no analytics, no tag manager, no third-party code of any kind can run on these pages.

When you buy something

Pressing checkout sends your cart — product names and quantities, nothing about you — to this site, which asks Stripe to open a checkout session and sends you to Stripe's own page. Everything after that point happens between you and Stripe: your name, email, billing address, and card number are typed on their page, under their privacy policy, and this server never sees the card number at all.

Stripe tells us afterwards what was ordered and how to reach you about it, and we keep that because it is a record of a sale we are obliged to keep. We do not add you to a mailing list off the back of a purchase.

What our host necessarily sees

This site runs on Cloudflare Workers. Delivering any page over the internet requires the network to handle your IP address, and Cloudflare keeps operational logs of requests — the same information every web host has, used to serve traffic and to absorb attacks. We do not export those logs, join them to anything else, or use them to identify individual visitors.

Product images are served by Stripe from files.stripe.com, so on a page showing one, Stripe's servers receive your IP address — before you have clicked anything and whether or not you buy. That is the only third party involved in serving this site. No fonts, no stylesheets, and no scripts are fetched from anywhere else: the typefaces are whichever ones your device already has, and everything else you see here comes from this domain.

When you email us

If you write to us, we have your message and your address, and we keep them so we can carry on the conversation and honour anything we agreed to in it. We do not add you to a mailing list, and we do not sell, rent, or share contact details with anyone. Ask us to delete our copy of your correspondence and we will, except where we are required to keep records of a commercial engagement.

Client data is governed elsewhere

This page covers this website only. Data belonging to systems we build or operate for a client is governed by that client's agreement with us. Ask us for the specifics of a particular engagement and you will get them in writing.

Questions

Write to kasey@southernutahsoftware.com and a person will answer. If any statement on this page ever stops being true, this page changes with it.

Last reviewed July 30, 2026.