What we collect, and what we don't.

When you send us a message we store your name, email address, company if you give one, and what you wrote. Saved with it: the time it arrived, which of the two languages you wrote in, the line your browser sends to identify itself, meaning its make, version and operating system, and what the mail server said when the email telling us you wrote went out.

We use it to answer you and to keep track of the conversation. We do not sell it, share it with advertisers, or add you to a mailing list you did not ask for.

We count submissions per IP address so a script cannot empty itself into the inbox. The address is used for that count and nothing else: it is not attached to your message and not written to the database.

This site runs no third-party analytics. No pixel, no tag manager, no counter. Fonts and styles are served from here, not from anyone's CDN.

The one cookie this site sets itself is the sign-in cookie for the people who publish it. Reading the site never gives you one of ours.

The contact form is the exception to "nothing third-party". It carries Google reCAPTCHA v3, which runs unseen in the background, so a script cannot fill the inbox. Google's code loads on any page with the form on it, may set Google's own cookie, and sends Google details of your browser and how you use the page so it can score how likely you are to be a person. Google's Privacy Policy and Terms of Service cover that, and both are linked under the form. What reaches us is that score, nothing else, and it is not stored.

The Work page is not all ours. The moving figure there runs on Spline's code: their runtime, fetched from their CDN when the page needs it. The figure itself is not — the scene file is served from here, so the thing that actually draws the robot never touches their servers. Fetching the runtime is one request to Spline, and they see your address for it the way any server you fetch a file from does. What their code does once it is running in your browser we do not control, only where it can reach: the policy this site sends lets it talk to Spline and nowhere else, and denies it the camera, the microphone and your location. We can tell you it draws a robot, not what it keeps.

Two toggles, and neither writes anything unless you press it. The theme toggle puts wq-theme in local storage, so the site opens dark or light the way you left it. The sound toggle puts wq-sound in session storage, which your browser throws away when you close the tab. Neither reaches us.

Your language is not one of them. It is in the address, /ar for Arabic and nothing for English, so the link carries it and nothing has to remember you. Arrive on an address with no language in it and you get English, because a bare address is an English address.

One corner of the site is older than that. The product pages, and the old 404 behind them, switch language with a button rather than a link, and the button does leave your choice in your browser, under wq-lang, so those pages reopen in the language you last read them in. It is the one place the paragraph above does not hold.

The form stores your enquiry and emails it to the people who answer it, which is how anyone notices you wrote. So it also travels through the mail server we send with, and a copy sits in that mailbox.

There is no screen for reading enquiries. The newsroom publishes the site; it does not list them. Getting at a stored one takes a database credential.

We have set nothing to expire them. There is no retention clock and no job that sweeps them out: an enquiry sits there until a person deletes it. We keep one while the relationship is live, and delete it, from the database and from our inbox, when you ask. There is no button for it; somebody does it by hand.

To see what we hold about you, or to have it deleted, write to tafseel@walqalum.com.