Legal
Privacy &
cookies.
This site has one form and one cookie. Nothing here is tracked, profiled, sold or shared with advertisers. Below is the whole of it, in plain terms.
Who is responsible
Hudio is a one-person business operating as a sole trader in Manchester, UK. I am the data controller for anything described on this page. For any question about your data, or to ask me to delete it, email [email protected].
What the contact form collects
When you submit the contact form, the following is collected:
- your name
- your email address
- your company name, if you give one
- the budget range and timeline you pick, if you pick them
- the kinds of work you tick
- the message you write
- the IP address the request came from
Only your name, your email address and your message are required. Every other field is optional and the form works without them.
Why, and what happens to it
It is used to read your enquiry and reply to it. That is the only purpose. The submission is sent as a single email to my own inbox through smtp.gmail.com, and it stays in that inbox. There is no database, no customer relationship system, no mailing list and no newsletter. Nothing is passed to anyone else, and nothing is used for advertising or profiling.
The lawful basis is that processing is necessary to take steps at your request before entering into a contract, and my legitimate interest in answering people who contact my business.
If the email fails to send, the enquiry is written to my hosting provider's log so it is not silently lost. Those logs are held by the hosting provider and are not public. This only happens when delivery fails.
How long it is kept
Enquiries stay in my email account for as long as the conversation is useful, and are deleted on request. If we end up working together, the project correspondence is kept for as long as I need it for business and tax records. If we do not, tell me and I will delete the thread.
Cookies
One cookie, named __Host-session. It is set only on pages
that carry a form, it holds a single random security token that proves a
submission came from the form and not from another site, and it is
deleted when you close your browser. It contains no identifier, nothing
about you, and nothing that follows you between visits.
There is no consent banner because this cookie is strictly necessary for a service you asked for, which is the one category that does not require consent. There are no analytics, advertising or tracking cookies on this site, because there is no analytics, advertising or tracking on this site.
Your choice of light or dark theme is remembered in your browser's local storage, on your own device. It is never sent to the server and I cannot read it.
Your IP address
The address your request came from is held in the server's memory for up to an hour so the contact form can refuse a flood of automated submissions. It is not written to a database and it does not survive a restart. It is included in the enquiry email so I can tell a genuine message from a spam run.
Other people involved
- Railway hosts the site. Requests reach me through their infrastructure and standard server logs are held there.
- smtp.gmail.com carries the enquiry email and my email provider stores it.
- Google Fonts serves the two typefaces this site uses. Your browser requests them from Google, which means Google receives your IP address and browser details when a page loads. No cookie is set by that request.
Your rights
Under UK data protection law you can ask me for a copy of what I hold about you, ask me to correct it, ask me to delete it, or object to my using it. Email [email protected] and I will deal with it. In practice, for most people, the answer is one email thread and it takes me a minute to remove.
If you are not happy with how I have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Security
The site is served over HTTPS only. Form submissions are protected against cross-site posting, request rates are capped, and the site sets a strict content security policy so no third-party script can run on it. No payment details are ever handled here.
Changes
If this changes, the page changes with it. Last updated 2026-08-10.