Keep sensitive details out
Please do not send passwords, home addresses, school schedules, medical information, or emergency requests in contact messages. Use local emergency services for an emergency.
Privacy and safety
A clear note about your information.
We keep public pages useful and contact paths bounded. This page explains the choices and limitations that matter when you contact Pillars of Tech. The protected contact form is currently available, and direct email is also supported.
What we ask for
Only the details needed to help.
The currently available protected contact form asks for your name, email, subject, and message. Public live chat is not enabled yet, so we do not collect a visitor chat display name or email. Direct email remains available when that is easier. Public pages also provide visible keyboard focus and respect reduced motion when a visitor requests it.
Under 13? Ask a guardian
Visitors under 13 should ask a parent or guardian before sending a contact message. The protected contact form requires an email address so the team can follow up.
Messages stay text-only
Public live chat and the Discord reply bridge are not enabled yet. There are no visitor chat accounts, Discord invites or usernames, public Discord access, chatbot or AI replies, or response-time promise.
How contact is protected
A small, bounded route.
The currently available protected contact form uses a validated server API. Visitors do not receive direct access to contact data or staff destinations.
Contact form boundary
Contact inputs use strict validation, same-origin checks, honeypots, bounded plain text, server-owned destinations, durable rate limits, and server-verified CAPTCHA checks. Messages render only as text, and the protected form does not expose private records to visitors.
Both the regular CAPTCHA and optional claw game use Cloudflare Turnstile for spam protection. Cloudflare processes browser and network signals to verify visitors. We send only the verification token to its verification service, not your contact message. Read Cloudflare’s privacy policy.
If a future visitor chat is approved, its design would use a random opaque token in an HttpOnly, SameSite=Lax, path-scoped cookie that is Secure in production, with only an HMAC or keyed hash stored server-side.
Deferred chat and retention
Public live chat and the Discord reply bridge are not enabled yet. No staffed queue, connected Discord destination, or visitor chat reply path is available. Direct email and the protected contact form are the supported visitor channels today.
No chat-retention job that deletes messages after 30 days is running because public chat is not enabled. If a future service is approved, its retention, privacy, and security controls would be documented before launch. We do not log message bodies, emails, tokens, webhook URLs, Discord secrets, or service-role credentials.
Donation checkout
Our donate page automatically loads an embedded checkout hosted by HCB. All donation transactions go through HCB and its payment providers. Pillars of Tech does not receive your card number, security code, or payment credentials.
Learn how donations workKnown limitations
What this page cannot promise.
Public live chat and the Discord reply bridge are not enabled yet. The protected contact form and direct email are the supported visitor channels today; there is no office-hours queue or guaranteed response time. An emergency should use local emergency services.