Legal — document 01
Last updated 1 September 2026Privacy
policy.
This describes exactly what happens to your information when you visit softwayer.com or send us a problem through the form on the home page. It is written to be read, not to be survived.
The short version
- No cookies. Not one. No consent banner, because there is nothing to consent to.
- No analytics, no tracking pixels, no advertising. We do not know how many people visit this page.
- We never sell or rent your information. There is no scenario in which we would.
- The form is the only thing that collects anything about you — your email address and what you wrote.
- Your theme choice and your votes stay on your own device and are never sent anywhere.
- One external service is involved: Google Fonts, which sees your IP address when the page loads.
The rest of this page is the same thing said carefully. If anything here is unclear, write to hello@softwayer.com and a person will answer.
01 — Who we are
Softwayer is a software company based in Islamabad, Pakistan. We build and operate small SaaS tools, each on its own subdomain of softwayer.com.
For the purposes of data protection law, Softwayer is the data controller for the information described on this page — meaning we are the ones who decide what is collected and why.
- Controller
- Softwayer
- Location
- Islamabad, Pakistan
- Privacy contact
- hello@softwayer.com
- Named contacts
- Hassan Saleemi · Rizwan Ahmed
This policy covers softwayer.com and this page only. Individual products on their own subdomains will each carry their own policy, because each one handles different data.
02 — What we collect
a. What you type into the form
The intake form at the bottom of the home page asks for two things and offers a third:
- Your email address — so we can reply. Required.
- A description of your problem — whatever you choose to write. Required.
- Which of our tools it relates to — optional, and just a list of names you tapped.
We also record the moment you submitted it. Nothing else is captured — there is no hidden field recording your screen size, your location or how long you spent reading.
Please do not put sensitive information in that box. It is a free-text field going to an email inbox. Do not include passwords, API keys, card numbers, national ID numbers, health information or anyone else's personal details. Describe the problem; leave the credentials out of it.
b. What sits on your own device
The site stores three small values in your browser's local storage. These are not cookies: they are never attached to a network request, so they never reach us or anyone else. They exist so the page behaves sensibly on your second visit.
sw.theme- Whether you chose day or night shift. Cleared when you clear site data.
sw.votes- Which upcoming tools you voted for. We never receive these — the counts on the page are static.
sw.booted- A single flag so the opening animation does not replay. Cleared when you close the tab.
You can delete all three at any time through your browser's "clear site data" setting. Nothing breaks; the site simply forgets your theme.
c. What our host records automatically
Like every web server on the internet, the server that delivers this page writes a log entry each time a file is requested. That entry typically contains your IP address, the page you asked for, the time, and your browser's user-agent string. We do not read these logs for analytics and we have no dashboard built on them; they exist for security and for diagnosing outages, and our hosting provider deletes them on their own schedule.
d. Google Fonts
The typefaces on this site are currently loaded from Google's font service. When the page opens, your browser requests those files from fonts.googleapis.com and fonts.gstatic.com, and that request necessarily reveals your IP address, your browser and your operating system to Google.
We want to be plain about this rather than bury it: it is the only external service the site contacts, we get nothing from it, and it is the one place where information about your visit reaches a company that is not us. Google describes what it does with that data in its own privacy policy.
03 — Why, and on what legal basis
If you are in the UK or the European Economic Area, the law requires us to name a lawful basis for each thing we do. Here they are.
| What | Why | Legal basis |
|---|---|---|
| Your email and message | To read your problem and write back to you | Legitimate interest — you contacted us and expect a reply |
| Theme and votes on your device | To remember a preference you set yourself | Strictly necessary for a feature you asked for |
| Server log entries | Security and keeping the site running | Legitimate interest |
| Font loading | To display the page as designed | Legitimate interest |
We do not rely on consent for anything, because we do not do anything that requires it — no tracking, no marketing, no profiling.
04 — What we never do
- We do not sell, rent, or trade your information. Ever, to anyone, for any amount.
- We do not run analytics. No Google Analytics, no Plausible, no Meta pixel, no heatmaps, no session recording.
- We do not show advertising and we do not let anyone advertise to you here.
- We do not add you to a mailing list. Writing to us is not subscribing to anything.
- We do not build a profile of you and no decision about you is made automatically.
- We do not track you across other websites, and there is nothing here that could.
05 — Cookies and device storage
This site sets no cookies at all. That is why you were not shown a cookie banner — there is genuinely nothing to accept or decline.
It does use local storage, which is a different mechanism, and we would rather explain the difference than hide behind it. A cookie is sent to a server with every request you make. Local storage is not: it is a note the page leaves for itself in your browser, and it stays on your machine. The three values listed above are all we store, they contain no identifier, and they cannot be used to recognise you anywhere else.
06 — How long we keep things
- Your form message
- Kept in our email while the conversation is useful, and deleted within 24 months at the latest. Ask us sooner and we will delete it sooner.
- Device storage
- Until you clear it. We have no ability to read or remove it for you.
- Server logs
- Held briefly by our hosting provider on their retention schedule, then discarded.
07 — Who else can see it
Running a website means a small number of companies necessarily touch the data. We keep that list as short as we can. As of the date at the top of this page it is:
- Our hosting provider — serves the files and keeps the server logs described above.
- Our email provider — receives and stores the message you send through the form.
- Google Fonts — receives your IP address when the fonts load, as described in section 02d.
Beyond that, we will only hand over information if we are legally required to. If that ever happens and we are permitted to tell you, we will.
08 — Where your data goes
We are in Pakistan, and the services above operate servers in several countries including the United States and the European Union. If you write to us from the UK or the EEA, your message will therefore be read outside your own country.
Pakistan does not currently have an adequacy decision from the European Commission. We keep the amount of information involved deliberately small — an email address and whatever you chose to write — precisely so that this transfer stays proportionate to what you asked us to do, which is reply to you.
09 — Your rights
Depending on where you live, you have some or all of the following rights. We honour them for everyone who asks, regardless of where they are, because drawing a line by nationality would be petty.
- Access — ask for a copy of what we hold about you.
- Rectification — have anything inaccurate corrected.
- Erasure — ask us to delete it.
- Restriction — ask us to stop using it while a question is resolved.
- Portability — receive it in a format you can take elsewhere.
- Objection — object to our relying on legitimate interest.
- Withdraw consent — where consent ever applies, though at present it does not.
- Complain — to your local data protection authority.
To use any of these, email hello@softwayer.com. No form, no ticket system, no verification hoops beyond making sure you are the person who wrote to us. We will respond within 30 days and usually much sooner.
If you are in the EEA or the UK, you can complain to your national data protection authority. In the UK that is the Information Commissioner's Office.
10 — Children
This site sells business software and is not directed at children. We do not knowingly collect anything from anyone under 16. If you believe a child has sent us something through the form, tell us and we will delete it.
11 — Security
The site is served over HTTPS. It has no login, no database of visitors, and no stored payment information, which means there is very little here to steal. The messages people send us live in an email account protected by a strong unique password and two-factor authentication.
No system is perfect. If we ever discover a breach that puts you at real risk, we will tell you directly and promptly rather than issuing a statement and hoping you miss it.
12 — Changes
If we add a tool that collects something new, or drop a service, this page changes and the date at the top changes with it. We do not quietly edit policies. For anything material we will say what changed and when.
13 — Contact
One address for everything on this page:
A person reads it. A person replies. That is the whole system.
This policy describes our actual practices in plain language. It is not legal advice, and it has not been reviewed by a lawyer. If Softwayer takes on clients in a regulated sector, or begins processing data at scale, have a qualified data protection lawyer review this document before relying on it.