Privacy Policy
Last updated: 8 October 2026
This policy explains what personal data Stratamend (“we”, “us”) collects through stratamend.com, why we collect it, and the choices you have. We handle personal data in line with Singapore’s Personal Data Protection Act 2012 (PDPA).
What we collect
When you apply as a design partner
The design partner form asks for your full name, work email, company, industry, country, an optional codebase size and an optional note about what you would like to modernize. Please do not include source code, credentials or other confidential material in the note.
When you visit the website
- Server logs. Like most websites, our web server records technical data for each request, including IP address, date and time, the page requested, the referring page and browser type. We use these logs for security and troubleshooting, and they are deleted automatically after about ten days.
- Abuse protection. To limit spam, the form keeps a one-way hash of your IP address for one hour to count how many applications were sent from it.
We do not use analytics, advertising or tracking cookies. The website does not set cookies for visitors; cookies are only used for our own administrators when they log in.
How we use it
- To review your application and reply to you. A founder reads every application and replies within two business days.
- To discuss and run a design partnership with your organization, if we both decide to proceed.
- To keep the website secure and working.
We do not sell personal data, and we do not add you to a marketing mailing list.
Who processes it
We use a small number of service providers to run the website. They process data on our behalf only as needed to provide their service:
- Hetzner Online hosts the website and its database on servers in Singapore.
- Cloudflare provides network delivery and security for stratamend.com and forwards email sent to our domain. It processes visitor IP addresses and request data, and may do so outside Singapore.
- Google serves the web fonts used on the site, so your browser connects to Google’s servers when a page loads. Google also hosts the mailbox that receives our form notifications and email.
Where personal data is transferred outside Singapore, we rely on these providers’ contractual commitments to protect it to a standard comparable to the PDPA. We may also disclose personal data where required by law.
How long we keep it
We keep design partner applications only as long as we need them for the purposes above, and we delete an application when you ask us to. Server logs are deleted after about ten days, and the IP hash used for abuse protection expires after one hour.
How we protect it
The website is served over HTTPS. Applications are stored as private records that only our administrators can access, and administrator access is protected by individual accounts.
Your choices and rights
You can ask us to:
- tell you what personal data we hold about you and how we have used it;
- correct personal data that is inaccurate or incomplete;
- withdraw your consent and delete your application.
Send requests to [email protected]. We may need to confirm your identity before acting on a request, and we will respond as soon as reasonably possible.
Contact
Questions about this policy or our handling of personal data, including for our Data Protection Officer, can be sent to [email protected].
Changes to this policy
We will update this page if our practices change, and revise the date at the top.