Pre-launch draft
This page describes the current preview. It must be reviewed and updated for the production service before launch.
Privacy Policy — pre-launch draft
Draft updated 7 November 2026 — owner and legal review pending
Scope and operator
This document describes the current CACHE AGENCY website preview. It is a draft for review, not a declaration of legal compliance. The legal operator name, legal status, business address and privacy contact are not confirmed. CACHE AGENCY is the name displayed on the site; it does not establish a registered legal identity.
cacheagency.net is a planned domain; purchase and control are not confirmed. Cloudflare Pages is planned hosting, not a service activated by this implementation. Public launch remains blocked until the operator and processing arrangements are confirmed.
Contact in the default preview
In the default preview, the form checks your name, contact details, selected service and contact permission in your browser. A project description is optional. Use fictitious sample details in this preview; do not enter sensitive or confidential information. In this sample-only mode, nothing is sent to CACHE AGENCY by the form, and entries are not saved in cookies, localStorage or a backend.
A validation result is not delivery. Browser autofill, page restoration and device access are controlled by your browser and device; this application cannot promise to erase those records. The contact form cannot receive privacy requests.
If approved contact delivery is enabled
A separate contact mode is prepared but disabled by default. In the public build, the form stays hidden until this site confirms that the sending service is configured. Configuration readiness is not proof of legal approval or provider activation. Public launch still requires the operator details, privacy review and processing arrangements described below.
Approved business email and WhatsApp links open the corresponding communication service. Messages sent there use that service. The operator and provider arrangements must be confirmed before offering these channels.
If that mode is approved and enabled, Cloudflare Turnstile verification may load before submission. When you submit, the form sends your selected service, name, email address or WhatsApp number (or both), optional project description, permission to be contacted about the enquiry, language, a request identifier and verification token to this site. The server verifies the token with Cloudflare and passes the enquiry to Resend for the configured recipient. Provider acceptance does not confirm inbox delivery.
That mode also uses temporary abuse-prevention records derived from network information, request identifiers and verification tokens; operational logs may record request identifiers and result codes. It does not intentionally store enquiry text in the abuse-control records. Provider processing, mailbox retention, security-record retention, access and deletion procedures must be reviewed and disclosed before enabling this mode. Do not enter real enquiry details while the form identifies itself as sample-only.
Theme, fonts and requests
Only a display preference called theme is stored by the site after you choose light or dark. It is not an enquiry record. You can clear it on the Cookie Policy page. Fonts and branding assets are served from the same origin; pages no longer automatically request Google Fonts.
Serving a page or asset requires a network request. The serving environment can receive connection information such as IP address, requested URL and browser headers. Actual log access, retention and recipients must be confirmed for the production setup. No analytics, advertising, social embeds or account system is installed. The default preview does not load a third-party verification widget.
Purposes, recipients and retention
Default preview functions are displaying the site, checking a sample brief locally and remembering an explicitly selected theme. There is no connected enquiry recipient or marketing mailing list. The theme has no automatic expiry and remains until removed by you or your browser.
In sample-only mode, no backend retention period applies to form entries. Browser caches and autofill have their own controls. Hosting/security log retention and any future enquiry retention are not confirmed; no numerical period is claimed. Production purposes, legal basis, recipients, processors and deletion procedures must be approved before collection is activated.
Moroccan privacy rights
Moroccan Law 09-08 provides rights of access, rectification and opposition subject to its conditions. A verified operator contact for exercising these rights is not confirmed. This is a launch blocker; do not use the disconnected form as a rights-request channel.
Information on rights and complaints is available from the CNDP. This preview does not claim a CNDP declaration, authorization, transfer approval or certification.
Providers and international processing
Cloudflare Pages and any future messaging service require a specific review of contracts, subprocessors, locations, security features and cross-border processing. A provider contract alone is not a statement that Moroccan notification or transfer requirements are satisfied. These arrangements are not yet approved.
External reference links open other websites only when you choose to follow them. Their operators have their own practices; no embedded external content is needed to read these pages.
Security and launch conditions
Before production, the owner must approve the operator details, rights contact, processing basis, retention, access controls, incident handling and applicable CNDP formalities with qualified advice. Any future delivery endpoint requires its own server-side validation and security review. The lack of delivered forms does not itself establish an exemption from privacy rules. No security or accessibility certification is claimed.
Changes to this draft
Review this notice again when hosting, storage, delivery or other technologies change. A new policy text alone does not activate those services or authorize public launch.