# Privacy

> What Leeeds collects when someone submits a form, how it is used, where it is stored, and how long it is kept.

Leeeds is operated by Bruce & Eddy. It stores form submissions on behalf of the businesses that use it ("clients"). This page describes what the service does with that information.

## What a form submission stores

- The fields the visitor fills in: typically name, email, phone, and message, plus any other fields on the form, such as business name or website.
- The address of the page the form was on, or the fact that it arrived through the WordPress plugin or API.
- The time it was received and the status and notes the client adds while following up.

Leeeds does not store visitors' IP addresses with leads. An IP address is used in the moment to limit repeated submissions and, when a site turns it on, to check the submission with Cloudflare Turnstile. Like any website, Cloudflare processes request details such as IP addresses to deliver and protect the service.

## How it is used

A submission is shown to the client whose site it came from, in their Leeeds inbox, and emailed to their notification address. The visitor gets one automatic reply per site per 24 hours. Leeeds does not sell lead data or use it for advertising.

## Where it is stored and for how long

Data is stored in Cloudflare's D1 database and email is sent through Cloudflare Email Sending. A lead is kept until the client deletes it, deletes the site it came from, or their account is removed. To have a submission removed, contact the business you submitted it to, or [contact us](https://leeeds.dev/contact).

## Dashboard sign-in

Clients sign in with a one-time link emailed to their address, valid for 15 minutes. Signing in sets a single session cookie that lasts 7 days and is used only to keep you signed in. Leeeds sets no advertising or analytics cookies.