Privacy Policy

Last updated: September 11, 2026

This notice explains how Magentary handles information when you visit magentary.com or ask us to assess Magento or OpenMage work. It replaces the historical WordPress privacy text, which no longer describes the current site or contact workflow.

Information you choose to submit

The assessment forms ask only for the context needed to understand and reply to a request. Depending on the form, this can include:

• your name and email address;
• your company, agency or hosting-provider details;
• a public store or company URL and the Magento/OpenMage version, where relevant;
• your description of the problem, requested work or partner engagement; and
• the page, product and form context needed to route the request correctly.

Do not send passwords, private keys, payment credentials, customer records or other secrets through a public form. We will request secure access separately if an assessment requires it.

Why we use this information

We use submitted information to:

• review whether the request is a suitable Magentary engagement;
• reply by email with an initial assessment and request missing context;
• maintain the request and related correspondence when work is agreed;
• protect the form from automated or malformed submissions; and
• meet legal, accounting and security obligations where they apply.

We do not use assessment submissions to sell unrelated products or to build an advertising profile.

How a submission is processed

The site sends a form submission to the Magentary API. The API validates the form and product context, assigns an idempotency identifier, and stores the accepted request together with a delivery task. A separate delivery worker sends the notification to the configured Magentary contact mailbox. This makes temporary email outages retryable without asking you to submit the same request repeatedly.

The application does not intentionally persist raw IP addresses or User-Agent values in the submission record. Security and delivery providers may process technical request metadata in their own logs under their terms and retention policies.

Service providers and sharing

Access to a request is limited to the people and service providers who need it to operate the site, prevent abuse, deliver email or assess and perform the requested work. The current workflow may use:

• Cloudflare for site delivery, the same-origin API proxy and, when enabled, Turnstile verification;
• the configured PostgreSQL service for application state and the notification outbox; and
• the configured SMTP provider for assessment notifications and replies.

We may disclose information when necessary to comply with law, protect the site or users, investigate abuse, or establish and defend legal claims. We do not publish request contents.

Cookies and similar technologies

The current native site does not intentionally set advertising or analytics cookies. The browser may receive essential cookies or technical storage from Cloudflare or from an optional security verification service. If submission tickets are enabled in a future deployment, they use a short-lived, secure, HttpOnly cookie for that protection and are not a marketing identifier. This page will be updated if analytics or other non-essential tracking is introduced.

Retention and security

We keep request information and related correspondence only for as long as it is needed to assess, deliver and support the work, resolve disputes, meet legal obligations and maintain security records. We then delete or anonymize it where practicable. The exact retention period can depend on the relationship and the applicable legal obligation.

Forms use HTTPS in normal operation, strict validation, a honeypot and optional Turnstile protection. No internet transmission or storage system is completely secure, so please use the form only for the non-secret context needed for an initial assessment.

Your choices and rights

Depending on where you live, you may have rights to request access to, correction of or deletion of personal information, to object to or restrict certain processing, or to withdraw a consent where consent is the applicable basis. To make a request, use the contact form and state that it concerns privacy. We may need enough information to verify the request and may retain information where the law requires it.

Children and third-party sites

This site is intended for business users and is not directed to children. The site can link to services operated by other organisations. Their own privacy notices apply after you leave Magentary.

Changes to this notice

We may update this notice when the site, form workflow or applicable requirements change. The date at the top identifies the current revision.

Contact

For a privacy question or request, use the Magentary contact form. Please do not include secrets or unnecessary personal information in that request.