Introduction
Flowex Labs uses this website to share information about its services and to let visitors contact the team. This policy explains the data flows that are visible in the current codebase.
The site includes a contact form and Google Analytics 4. If you do not want information sent through the contact form, you can reach Flowex Labs directly at [email protected] instead.
Information we collect
The main information collection point on this site is the contact form at /contact.
Contact form data
Form inputs are checked in the browser before submission and validated again on the server. The server sanitizes single-line fields by removing control characters and angle brackets, lowercases email addresses, and preserves message line breaks while collapsing excessive blank lines.
- Name (required)
- Email address (required)
- Company (optional)
- Subject (required)
- Message (required)
Analytics and cookie data
The shared site layout loads Google Analytics 4 on every page. Based on the current implementation, Google Analytics collects page-view and session information and sets standard analytics cookies such as _ga and _ga_*.
Aaron's audit also notes that Google Analytics may receive device, browser, and IP-based location information as part of standard GA4 collection.
How we use information
Contact form submissions are used to review and respond to inquiries. After validation, the site forwards the submitted data to Mailgun so the message can be delivered to the configured Flowex Labs inbox.
The backend does not write contact form submissions to a website database. The application does record limited submission metadata in logs, and the site uses Google Analytics reporting to measure website traffic and engagement.
Storage, retention, and access
The current codebase does not define a separate customer database for contact submissions. Messages are passed to Mailgun for delivery, and retention after delivery depends on the email systems and provider policies involved.
Aaron's audit found no self-service deletion workflow, no visitor account area, and no in-site preference center. If you have a privacy question about information you submitted, email [email protected].
Security and protection measures
The site applies server-side validation and sanitization to contact form fields before attempting delivery. The contact endpoint is also rate-limited to five submissions per 15-minute window per IP address to reduce abuse.
Mailgun is used as the delivery provider for contact submissions, and Google Analytics is loaded directly from Google's scripts in the shared layout.
Third-party services
The following third-party services are visible in the repository and receive data from this website.
Mailgun
Purpose: delivery of contact form submissions.
Data shared: name, email address, optional company, subject, and message.
Google Analytics
Purpose: website analytics and traffic reporting.
Data shared: page and session activity plus standard GA4 collection data described in Aaron's audit.
Cookies and controls
The current site code does not include a cookie consent banner or a preference center. Google Analytics cookies are loaded automatically with the shared layout.
The repository audit did not detect first-party marketing cookies, user authentication cookies, payment flows, or customer account features.
Changes to this policy
Flowex Labs may update this page when site features or data practices change. The Last Updated date at the top of the page shows when the policy text was last revised.
Contact us
For privacy questions about this website or information submitted through the contact form, email [email protected].