Legal
Effective May 7, 2026 — Last updated May 7, 2026
This Privacy Policy explains what information Cornerstone Web Development, LLC ("Cornerstone Web Development," "we," "us," or "our") collects, how we use it, and who we share it with. We've written this to be direct and specific rather than vague.
This policy covers two contexts: (1) visitors to the public website at cornerstoneweb.dev, and (2) subscribers who use the Cornerstone Web Development platform.
Cloudflare (hosting and analytics)
cornerstoneweb.dev is hosted on Cloudflare. When you visit, Cloudflare's edge servers receive your IP address and standard browser request data (browser type, page requested, referrer) as part of normal HTTP traffic. We use Cloudflare Web Analytics, which is cookieless and privacy-first — it collects only aggregated page view counts and does not track individual visitors or store personal data.
Cloudflare's privacy policy: cloudflare.com/privacypolicy
Google Fonts
This site loads fonts from Google Fonts (fonts.googleapis.com). When the page loads, your browser makes a request directly to Google's servers, which means Google receives your IP address. We don't control this data. If you'd prefer to avoid it, you can use a browser extension that blocks Google Fonts requests.
Google's privacy policy: policies.google.com/privacy
Contact form
If you submit the contact form, we collect your name, email address, phone number, organization name, and message. This data is transmitted through our own Cloudflare Worker and delivered to our inbox. We use it only to respond to your inquiry. We don't add contact form submissions to a mailing list, sell them, or share them with third parties for marketing purposes.
Cookies
This site does not set any cookies.
This section applies to subscribers and their authorized users who access the CMS platform.
Account data
When we provision your account, we collect your name and email address. We operate our own authentication service, so your account lives in our database rather than with an outside identity provider. Your password is stored only as a salted hash — never in a form anyone can read, including us.
Two safeguards run when you sign in or choose a password. Cloudflare Turnstile checks that the attempt comes from a person rather than an automated script. New passwords are checked against the Have I Been Pwned breach list, which receives only the first five characters of a hash of the password — never the password itself.
Billing data
Subscription payments are processed by Stripe. When you check out, your payment information is submitted directly to Stripe — we never see or store your raw card number. Our database stores your Stripe customer ID and subscription status. Stripe retains billing records per their own data retention policy.
Stripe's privacy policy: stripe.com/privacy
Content you publish
Everything you create or upload through the CMS — articles, images, media, configuration — is stored in a GitHub repository owned by the Cornerstone Web Development organization on your behalf, and served via Cloudflare Pages. We don't use your content for any purpose other than providing the Service.
Platform usage data
Our database stores:
GitHub access tokens
The platform uses a GitHub App to access your site's repository. The installation access token is encrypted at rest in our database using AES-256 encryption.
Third-party services used by the platform
| Service | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Subscription billing | stripe.com/privacy |
| GitHub | Repository hosting for site content | docs.github.com/…/privacy-policies |
| Cloudflare | Hosting subscriber websites, platform services, and bot protection at sign-in | cloudflare.com/privacypolicy |
| Railway | Application and PostgreSQL database hosting | railway.com/legal/privacy |
| Resend | Delivering account and announcement emails | resend.com/legal/privacy-policy |
| Have I Been Pwned | Checking new passwords against known breaches | haveibeenpwned.com/Privacy |
We use the information we collect only to:
We do not sell your personal information. We do not use it for advertising.
We share your information only with the third-party services listed above, and only to the extent necessary to operate the platform. We don't sell data to data brokers or share it with advertisers.
If we're required by law to disclose information (e.g., in response to a valid subpoena or court order), we'll comply with that legal obligation.
You can request access to, correction of, or deletion of your personal information by contacting us at privacy@cornerstoneweb.dev. We'll respond within a reasonable time.
If you're a subscriber, you can also export your content within fourteen (14) days of account termination by contacting legal@cornerstoneweb.dev.
This Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information through this site, contact us at privacy@cornerstoneweb.dev and we will delete it.
We use reasonable technical measures to protect the information we store — including AES-256 encryption for GitHub tokens and HTTPS for all data in transit. No system is perfectly secure, and we can't guarantee absolute security.
We may update this policy by posting a revised version at cornerstoneweb.dev/privacy and updating the "Last Updated" date. Continued use of the site or platform after changes are posted means you accept the revised policy.
Privacy questions or requests: privacy@cornerstoneweb.dev
This Privacy Policy is governed by the laws of the State of Oklahoma.