Scope and current technical stack
This website uses static HTML for content pages, a local JavaScript search index, and a PHP contact form. It does not load Google Analytics, Google AdSense, advertising cookies, or third-party behavioral tracking by default.
Contact form data
When a visitor submits the contact form, the server records the submitted name, email, topic, state reference, message, timestamp, and a generated reference number. The form also uses a session, CSRF token, honeypot field, minimum-completion-time check, and short rate limit to reduce abuse.
Storage and retention
Messages are stored in a server-side protected file so the site operator can review corrections and inquiries. The storage directory is blocked from public web access. The operator should establish and document an operational retention period before launch.
Hosting logs
Bluehost or other hosting infrastructure may process IP addresses, request URLs, timestamps, browser identifiers, and security logs as part of normal web hosting and abuse prevention.
Local site search
The site search runs in the browser against a local JSON index. Search terms are not sent to an external search provider by this package.
Advertising and consent
The website is prepared for future advertising, but advertising scripts remain disabled until a valid publisher identifier, updated privacy disclosures, and an appropriate consent implementation are configured. This privacy policy must be reviewed and updated before enabling advertising or analytics.
Questions and requests
Use the contact form for privacy questions or requests. Because laws and operational practices vary, the site owner should obtain legal review before enabling advertising or collecting additional personal data.
Security controls
The contact form uses server-side validation, a CSRF token, a hidden honeypot field, a minimum-completion-time check, a one-minute session rate limit, maximum field lengths, and a unique submission reference. These controls reduce common automated abuse but cannot guarantee absolute security.
Official third-party websites
When visitors follow an official external link, the destination authority may process device, cookie, account, or transaction information under its own privacy policy. This website does not control those systems and does not receive official account credentials or filing information from them.
Policy changes
This policy must be updated before enabling analytics, advertising, a consent-management platform, email marketing, user accounts, payment processing, or additional personal-data collection. Material changes should include a new effective date and operational review.