Privacy policy

Heaven on Hold (“we”) runs this website. This page explains what little data we collect and why. We do not use advertising networks, analytics suites, or other third-party trackers on the public site.

Cookies

Most public pages do not set cookies. The contact form sets a short-lived session cookie so we can check that the message came from this site (and not a forged request). If you sign in to the admin panel we keep using that same cookie, named hoh_session. It is HTTP-only, bound to this site, and used only to keep you logged in. It is deleted when you log out or close the browser. We do not use it to track visitors who never log in or send a message.

Contact form

If you submit the contact form we store your name, email address, message, the date, and the IP address the request came from. We keep that so we can reply and to help reduce spam. We do not sell it or pass it to anyone else. You can ask us to delete a message by using the same form or emailing us.

Other tracking technologies

We do not embed social widgets, heatmaps, or advertising pixels. Images, styles, and scripts are served from this website. The site is served over HTTPS.

Admin area

The administration area is password-protected. Login attempts are logged against IP address for a short period so we can slow down guessing attacks. Passwords are stored as one-way hashes, not in plain text.

How long we keep data

Contact messages stay until we have dealt with them and then deleted them. Session cookies last only for the browser session. Failed-login records are incidental and not kept as a visitor profile.

Your choices

You can refuse the session cookie by not visiting the admin pages. For contact-form data, ask us to delete your message and we will. If this policy changes we will update this page.