Last updated: 5 November 2026
Who this policy covers
This policy describes the demonstration website operated under the project name Still & Clear at stillclear.pro. Still & Clear is a concept identity, not a verified registered company. The privacy contact placeholder is hello@stillclear.pro. A real operator must add its legal entity, address, live contact details and applicable jurisdiction before using this policy in production.
Information you choose to provide
The enquiry form requests your name, email address, selected subject and message, together with confirmation that you have read this policy. Please do not submit payment information, passwords, identity documents, health information or other sensitive personal data. We use the information only to understand and respond to the enquiry.
Static preview and server modes
In static preview, the form saves a draft in sessionStorage on your device and explicitly states that nothing has been sent. This draft lasts for the browser tab session and can be cleared using the browser’s site-data controls. With the included Python server, submissions are stored in a local SQLite database outside the publicly served site directory. Where SMTP is configured, the operator also receives an email notification.
Purpose and legal basis
For a live business, responding to a requested quotation or service enquiry may be necessary to take steps at your request before entering a contract. General correspondence may rely on a legitimate interest in responding to questions. The operator must document the basis appropriate to its actual activity and jurisdiction. The form acknowledgement is not consent to marketing; no mailing list or advertising profile is created.
Retention and access
Demo form records are not automatically deleted. Before production, configure a documented retention period, limit database access and remove records when their purpose ends. A suggested starting point for unanswered general enquiries is 90 days, subject to operational and legal needs. Do not enter real sensitive information while testing.
External services
Google Fonts receives connection information when fonts are loaded. Alpine.js is delivered by jsDelivr. Unsplash hosts the stock team portraits. Google Maps is loaded only after the visitor requests it. These providers may receive your IP address and standard request metadata and may process data in other countries. Review their own policies; self-host fonts and portraits if your deployment requires fewer third-party requests.
Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to certain uses of personal information and to contact a supervisory authority. In production, send requests to the verified operator contact. This example domain cannot receive such requests. Local draft data can be removed through browser controls.
Security and changes
The demo server validates field lengths and keeps submission records outside the static document root. It is not a substitute for production security: deploy behind HTTPS, configure request limits, control database access and assess abuse protections. Material changes to this policy should be reflected in the revision date and communicated as required.