Privacy Policy
Last updated: 21 October 2026
This notice explains how NEXORA handles information when you visit this website or ask us about a project.
1. Website and privacy contact
NEXORA is a remotely operated web design project working with enquiries from different countries. For questions about this website or the information submitted through it, contact us using the Telegram link below. NEXORA is a project name; this notice does not identify a registered company or establish a country of registration.
2. Information you provide
The enquiry form collects your name, at least one contact method (phone, email or Telegram), the selected service, an optional project description and the website language. We also create a request identifier, time of receipt and processing status. Please do not include identity documents, payment card details, health information or other sensitive information in your message.
3. Technical information
The hosting provider may process IP addresses, browser and device information, request times and security logs to deliver and protect the website. Our application uses a hashed IP-based identifier and request counters to limit abuse. A hash is not a guarantee of anonymity. We do not intentionally record enquiry contents in application logs.
4. Why we use information
We use enquiry details to reply, discuss requirements, prepare a quotation and take steps toward a possible project at your request. We use necessary technical information to keep the service secure. Depending on applicable law, these activities rely on your requested pre-contractual steps, legitimate interests in communication and security, or another required lawful basis. Sending an enquiry does not subscribe you to marketing. If a particular use requires consent, we will request it separately.
5. Required and optional details
Your name and one contact method are required so that we can identify and answer your enquiry. You may leave the other contact fields and project description blank, and choose “Not Sure Yet” for the service. If you prefer not to use the form, you can contact us directly via Telegram.
6. Storage, providers and international processing
Submitted enquiries are stored in Cloudflare D1 and reviewed through a password-protected administration panel by the website owner. Cloudflare provides hosting, delivery, security and database infrastructure. Its global infrastructure may process information outside your country. Our D1 database was created with an Asia-Pacific location hint; this is not a guarantee that all processing or copies remain in one country. Information may also be disclosed where legally required. We do not sell enquiry details or use them for third-party advertising.
7. Retention
We retain enquiry information while it is needed to answer the request and carry out related discussions. Information needed for an agreed project, accounting duties or legal claims may be retained for the applicable period. Unneeded records should be removed following review; the current service does not automatically delete enquiries after a fixed number of days. You may request deletion using the contact below. Security counters have a 15-minute operating window and admin sessions last up to eight hours; expiry ends their validity, while stored records remain until technical cleanup. Hosting logs and provider backups may follow separate provider retention schedules.
8. Cookies and local storage
We use local storage named studio-language to remember the language you select; you can remove it using your browser settings. The administration area uses a necessary nexora_session cookie for authenticated access, with an eight-hour maximum lifetime. The hosting provider may use necessary security cookies. We have not added advertising cookies, analytics scripts or behavioural profiling.
9. External services
Clicking Telegram opens a separate service. Information you send there is handled under Telegram’s own terms and privacy policy. Photographs and concept previews are served from this website; opening a gallery concept does not submit an enquiry or take you to a client website.
10. Security
We use HTTPS, a password-protected admin panel, limited-duration sessions, server-side validation and basic abuse controls. Administrator-created passwords are stored as salted derived hashes. These measures reduce risk but cannot guarantee absolute security.
11. Your choices and rights
Depending on the law that applies, you may request access, correction, deletion, restriction or a copy of your data, object to certain processing, withdraw consent where processing relies on it, or complain to the competent data protection authority. Contact us via Telegram and describe your request. We may need proportionate confirmation of identity and may retain information where the law requires it. We respond within the time required by applicable law. We do not make automated decisions with legal or similarly significant effects using enquiry data.
12. Changes and contact
We update this notice when the website’s practices change and show the updated date above. Material new uses may require additional notice or consent. For questions or privacy requests, use the Telegram contact below.
Privacy contact: Telegram @gnmafin
Cloudflare — Privacy Policy · Cloudflare DPA · Telegram — Privacy Policy