This policy explains what Design My Stair & Rail (“we”) collects at designmystairandrail.com, why, and the choices you have. We collect as little as we can and never sell personal information.

Using the planner without an account

The Cost and Planning Tool runs in your browser. Your configuration is kept in your browser’s local storage so you don’t lose work if you refresh; it is not sent to us unless you choose to save the project or request help. You can clear it by clearing site data in your browser.

Saving a project

When you save, we store the project configuration, concept geometry, estimated range, pricing-model version, an optional project name, an optional ZIP code, and — only if you enter one — your email address. We generate a random secure link token; we store only a one-way hash of it, so we cannot recreate your link. Anyone who has the link can open the project, so keep it private.

If you enter an email and ask us to send the link, we send one transactional email containing it. That does not subscribe you to anything. Marketing updates are a separate, optional checkbox.

Requests for help with next steps

If you submit the help form, we store your name, email, ZIP code, project stage and timing, the help you requested, and any optional details you add (phone, address, description, budget, whether you have plans or photos). We record three separate permissions: (1) direct contact by us — required to respond; (2) referral of your request to independent professionals — optional; and (3) marketing updates — optional. We share a request with a third party only if you gave referral permission, and only the information needed for them to respond. We do not currently accept file uploads.

Analytics

We may use Cloudflare Web Analytics, which counts page views without cookies. Our own first-party event log records only an allow-listed event name (for example “result displayed”), the page path, an optional short label such as a selected railing type, and the time. It never records names, emails, phone numbers, addresses, ZIP codes, project descriptions, dimensions, or project links.

We also use Google Analytics to see which pages and planner steps people use, so we can improve the site. It sets first-party cookies and receives your IP address, browser details, and the pages you view. Google signals and ad personalization are off, and we never send names, emails, phone numbers, addresses, project descriptions, or project links. You can opt out with Google’s opt-out browser add-on or by blocking cookies.

Security and abuse prevention

Forms use a hidden spam trap and may use Cloudflare Turnstile. To limit abuse, we keep a salted one-way hash of the submitting IP address for up to 24 hours; we never store the raw IP address. Data is stored with Cloudflare (D1 database) and transmitted over HTTPS.

Retention

Saved projects are kept until you delete them or until they have been inactive for an extended period, after which we may delete them. Help requests are kept as long as needed to respond and follow up, then deleted or anonymized. Rate-limit records are deleted after 24 hours. OWNER REVIEW: confirm specific retention periods before relying on this policy.

Your choices

  • Delete a project: open it with its secure link and choose “Delete project.”
  • Unsubscribe: use the link in any marketing email or the unsubscribe page.
  • Access, correction, or deletion of other data: email [email protected].

Depending on where you live, you may have additional rights under state privacy laws; contact us to exercise them.

Children

This site is intended for adults planning home projects and is not directed to children under 13.

Changes

We will update this page when our practices change and revise the date above.