Privacy notice
How information is handled on this website and in redesign previews.
Updated 2026-09-16
Who is responsible
The operator identified below is responsible for this website and its preview service. The businesses shown in fictional examples do not receive your information. An internal research concept does not create an affiliation with the business it depicts.
Preview requests
The request form on Frontier’s homepage is separate from the demonstration forms. When requests are enabled, your name, email address, website and optional message are saved in our private Supabase inbox so our team can consider your request. The form shows a confirmation only after a successful save. It does not subscribe you to marketing or automatically contact the business shown on your website. Abuse controls use keyed hashes of the sender address and email; the sender IP is not saved in the inquiry record. Requests remain in the private inbox until reviewed and deleted by the operator; you can request deletion using the operator details below. Do not submit sensitive information.
Support and email delivery
Resend handles mail sent to support@frontiermakes.com and the reserved marco@frontiermakes.com identity, plus transactional notifications about requests and orders. We store support messages and replies in our private database so we can respond. Delivery records distinguish accepted, delivered and failed messages. We disable email open and click tracking. Messages remain available until reviewed and deleted by the operator, subject to applicable contract and accounting duties. Do not send payment-card details or other sensitive information. Published customer websites use their own privacy notice and confirmed notification recipient; preview forms remain demonstrations.
Trying a business contact form
Contact forms inside concept websites are demonstrations. Submitted names, email addresses, service choices and messages are validated by the application and discarded. They are not written to our lead database or sent to the depicted business. Please use invented details when trying these forms.
Design choices and revision drafts
When you change a design option or type a revision draft, your browser stores that choice for that specific preview. This is used to retain the choice you requested, not for advertising. You can reset the design in the preview or clear this site's browser data. Without browser storage, a draft lasts only for the current tab session.
Private client access and orders
A private client link, when issued, grants access to one proposal. An essential, HTTP-only cookie maintains that access until the link expires or is revoked. Access checks use a hash of the token. When we email an access link, our private delivery queue also retains that link so the same message can be retried safely. For an enabled client project, explicitly saved design preferences are stored with the proposal. If checkout is available, the accepted terms, chosen design, content version, revision request and payment references are stored to manage that order. Demo previews cannot create paid orders.
Private preview activity
For a client preview linked to a research cohort, we record that the page was displayed, a visible interaction occurred, the proposal was viewed, a design was saved, checkout was started or a purchase was confirmed. These records help us understand interest and plan a relevant follow-up. They are attached to the private proposal, not proof of the identity of its viewer; a forwarded link or automated browser can create activity. Optional page-activity events use no extra cookies, tracking pixels, IP addresses or device fingerprints. You can turn them off for the current page from the preview footer. Do Not Track and Global Privacy Control signals disable optional page-activity recording. Saved project choices and transaction records still operate. Internal and fictional previews are excluded from campaign metrics. You may ask us to stop contact or remove research records using the contact details below.
Payment details
Enabled purchases use Stripe-hosted Checkout. Payment card details are entered with Stripe, not in our website database. Our application retains order amounts, currency, payment status, the buyer name and email provided at Checkout, and Stripe references needed for fulfillment and reconciliation. We use the Checkout email for order confirmations and setup instructions. A return from checkout alone is not treated as confirmation of payment.
Hosting and service providers
Vercel hosts the application and may process IP addresses, requested URLs, browser information and technical logs to deliver and secure it. When configured, Supabase stores homepage inquiries and client orders; Stripe processes enabled payments and Resend handles transactional and support email. We use Vercel Web Analytics on our public Frontier pages to count visits and page views. Our integration removes URL query parameters and fragments and excludes private previews, the dashboard and customer access pages. We do not send form contents or customer identifiers as analytics events. Do Not Track and Global Privacy Control disable these optional events. We do not add advertising trackers. We do not sell personal information or use it for cross-context behavioral advertising. Advertising tracking is not implemented; optional preview activity respects Do Not Track and Global Privacy Control.
Public business research
Internal research uses publicly accessible business website information such as services, business contact details and addresses. Sources, uncertainty and omitted claims are recorded separately. The purpose is to evaluate and privately review a possible website redesign. Public availability does not give us permission to fabricate facts, claim affiliation or reuse assets without considering their rights.
Purposes, retention and your choices
Where the GDPR applies, requested preview and order features are processed for pre-contractual steps or contract performance; security and limited internal business research rely on legitimate interests subject to an appropriate assessment; statutory accounting duties rely on legal obligations. Demonstration form submissions are discarded immediately. Browser drafts remain until cleared by you. Order records are retained for fulfillment and applicable accounting or dispute requirements; the retention rules for a client project must be reviewed before paid checkout is enabled. Hosting logs follow the provider's configured retention. We do not promise an unimplemented automatic deletion schedule.
Privacy requests
You may contact the operator below to request access, correction, deletion, restriction or portability where applicable, to object to processing, or to ask about retention and recipients. Identity verification and legal retention duties may affect a request. You may complain to your competent data protection authority. Do not put passwords, payment-card data, health information or other sensitive information into a preview or revision request.
Changes and international processing
Providers may process information outside your country, including in the United States. Any required processor agreements and international transfer safeguards must be in place for a production customer deployment. Changes to this notice are published here with a new version date. New data uses require a fresh review of the notice and controls.
Contact the operator
Marco Herz
Siegfriedstr. 7, 80803 München, Germany