Privacy Policy

What we collect, why, who handles it, and how to ask us to delete it.

Effective date: October 8, 2026

This Privacy Policy explains what personal information Exodus Core Solutions LLC ("Exodus Core," "we," "us") collects through excoresolutions.com and its sub-pages (the "Site"), through the unlisted preview pages we sometimes send to businesses (the "Preview Sites"), and through our business email and social media accounts. It explains why we collect it, who handles it, how long we keep it, and what choices you have.

We wrote it in plain language. We only describe things we actually do. If that changes, we will change this policy first (see section 15).

1. Who we are

Exodus Core Solutions LLC is a Pennsylvania limited liability company based in York, Pennsylvania. We provide web design, copywriting, and web hosting and care plans for small businesses. Our owner is Jeremiah Sokan.

2. What this policy does and does not cover

This policy covers the Site, the Preview Sites, and what we do with information we receive by form, email, phone, or social media message.

It does not cover the websites we build or host for clients. Each client site has its own owner and its own privacy practices. Where we handle visitor information for a client, we do it under our written agreement with that client, and you should read that client's own privacy policy.

3. Information we collect

a) Information you give us

Contact form. When you use the contact form we receive:

  • your name (the first and last name fields are combined into one),
  • your email address (required),
  • your business name (optional),
  • your phone number (optional),
  • the message you write.

You must turn on the "OK to contact me" switch before the form will send. We do not store that switch setting separately; turning it on is what permits the form to be sent.

Email, phone, text, and social media. If you email, call, text, or message us (for example on Instagram or LinkedIn), we receive what you send and your contact details or account name.

Please do not put sensitive information in the form or in email, such as Social Security numbers, payment card or bank numbers, passwords, or health information. We do not need any of it to answer an inquiry.

b) Information the contact form adds automatically

With each submission the form also sends us:

  • the web address of the page the form was on (this can include a package name if you came from a "get a quote" button), and
  • a timer value showing how many milliseconds the form was open. We use it only to tell people from automated spam.

c) Technical information from our hosting

The Site is hosted and delivered by Cloudflare. When you visit, Cloudflare's servers process technical data such as your IP address, the pages you request, your browser and device type, and the time of the request, so that the Site loads, stays secure, and blocks abuse. We do not add any analytics script to the Site. Cloudflare may show us basic, aggregate traffic figures that it measures on its own servers, and we do not use them to profile visitors.

d) Fonts and scripts loaded from other companies

  • Fonts. The Site's typefaces are served from our own domain. Your browser does not request fonts from Google or any other font service.
  • Bot check on the contact form (Cloudflare Turnstile). We may use Cloudflare Turnstile on the contact page to tell people from automated spam. It is not switched on at the time of writing. If we switch it on, your browser will load a small script from Cloudflare on the contact page, Cloudflare will receive your IP address and basic browser information to decide whether you are a person, and our form program will send the check result and your IP address to Cloudflare to confirm it. We will update this policy when that happens.
  • Concept demos. Some of the fictional concept sites under /demos/ load animation and scrolling code from content delivery networks (jsDelivr and unpkg). Those services also see your IP address and browser information when a demo page loads.

e) Public information about businesses we contact

Sometimes we build a free concept "preview" of a business's website and send the link to that business. To do that we collect publicly available information about the business and its public-facing contacts: the business name, address, hours, services, public contact details, text and images published on its own website, public social media profile or business listing, and similar public information. We use it only to build the preview and to contact the business about it. Section 5 explains how these previews work, how long we keep them, and how to have yours removed.

f) What we do not collect

We do not run advertising or social media tracking pixels, session recording, heat maps, or third-party analytics on the Site. We do not build profiles of visitors, and we do not collect payment card information on the Site (there is no checkout).

4. Cookies and browser storage

  • Cookies. At the time of writing, the Site itself does not set cookies. Cloudflare, which delivers the Site, may set a strictly necessary security cookie in some cases to tell people from automated traffic. We do not use cookies for advertising or analytics. If our own use of cookies changes, we will update this section first.
  • Browser storage. The home page and the digital business card page use your browser's session storage to remember that an intro animation has already played in that browser tab. It stays on your device, is cleared when you close the tab, and is never sent to us.

Because we use no advertising or analytics cookies, the Site does not show a cookie banner.

5. Preview Sites and our outreach

A Preview Site is an unofficial, unlisted concept web page we make for a specific business to show what a redesigned site could look like. It is not the business's real website, and the business did not ask for it. Each Preview Site carries a notice saying so; the full text is in our Disclaimers page.

How we handle them:

  • Preview Sites live at an unlisted web address on preview.excoresolutions.com. They are not linked from our Site, are marked "noindex" so that search engines should not list them, and are shared only with the business they were made for. Anyone with the link can open it, so please treat the link as semi-private.
  • We send the link to the business, usually by email, through the business's public contact details. Our outreach emails identify us, say they are advertising, and give you a way to tell us to stop. We honor opt-outs within 10 business days, usually sooner.
  • Preview Sites do not collect anything from the people who view them. They have no forms that send data to us, no cookies, and no analytics.
  • Deletion. We delete a Preview Site 30 days after we send the link, or sooner if you ask. If you do not respond, we delete the preview and the working files we made for it, and keep only a short record that we contacted you so that we do not contact you repeatedly. We keep that record for up to 12 months.
  • Opt-out. If you tell us to stop contacting you, we keep your name and email address on a do-not-contact list so that we can honor your request. That is the only reason we keep it.
  • Removal request. A business can ask us to take its preview down at any time. Email [email protected] with the subject "Remove preview" and the business name or preview link. We remove it within 1–3 business days, and we will confirm by email.

6. How we use information

We use the information above to:

  • read and reply to your inquiry,
  • prepare a scope and a quote if you ask for one,
  • provide services to you if you become a client (under a written agreement),
  • build Preview Sites and contact the businesses they were built for (section 5),
  • keep the Site and our email secure and block spam and abuse,
  • keep business, tax and accounting records, and
  • comply with the law.

The contact form tells you that we use your details "to respond to this request, and nothing else." We stand by that: we do not add contact-form senders to a marketing list. If we ever want to send you newsletters or promotions, we will ask for a separate opt-in first.

7. Who we share information with

We use a small number of service providers to run the Site and our email. They handle information for us and have their own privacy terms.

Provider What it does for us What it can see
Cloudflare, Inc. Hosts the Site and the Preview Sites, runs DNS and security, runs the small program that receives contact-form messages, and may run the Turnstile bot check (not on at the time of writing) Visitor IP addresses and request data; the contact-form submission while it is being processed
Resend Email delivery service. The contact form hands your message to Resend, which emails it to our inbox The contact-form fields and your email address, plus delivery logs that Resend keeps for a limited period under its own policies
Google LLC (Google Workspace) Our business email inbox, where inquiries arrive and our replies are stored The inquiry email, our replies, and other correspondence
jsDelivr and unpkg (concept demos only) Deliver open-source animation code to some demo pages Your IP address and browser information
Instagram/Meta and LinkedIn Where we post marketing content and sometimes receive messages Whatever you send us or post there, under their terms

We may also disclose information when the law requires it, to protect our rights or the safety of others, or to a buyer or successor if the business is sold or reorganized.

We do not sell your personal information. We also do not "share" it for cross-context behavioral advertising, as those terms are used in California law.

8. Where information is handled

Our providers handle information in the United States. If you visit from another country, your information will be transferred to and handled in the United States, where privacy laws may differ from those where you live.

9. How long we keep information

  • Inquiries that do not become a project: 24 months, then we delete them.
  • Client records (contracts, invoices, project correspondence): 7 years, for tax, accounting and legal reasons.
  • Preview Sites and the public information we collected to build them: 30 days after we send the link (section 5).
  • Records of outreach we made: up to 12 months; the do-not-contact list is kept for as long as it is needed to honor opt-outs.
  • Provider logs: Cloudflare, Resend, and Google keep their own technical logs and copies for periods set by those companies. Our contact-form program does not write your name, email or message to any log of ours; it records only a request ID and an outcome.

We may keep information longer if the law requires it or if we need it to resolve a dispute.

10. Security

The Site is served over HTTPS. The contact form accepts messages only from this Site, limits their size, and checks the format of each field before sending. Access to our hosting, email and form-delivery accounts is limited to the owner. No website, email, or storage system is perfectly secure, so we cannot promise absolute security.

11. Your choices and rights

You can email [email protected] at any time to:

  • ask what personal information we hold about you,
  • ask us to correct it,
  • ask us to delete it (we may need to keep some records the law requires), or
  • stop our outreach or remove your preview.

We will answer within 30 days, and sooner for removal and opt-out requests. We may need to confirm that the request really comes from you.

Review and change your information. If you sent us information through the contact form or by email and want to review or change it, email us at the address above. That is the process for reviewing and requesting changes to personal information we hold.

State privacy laws. Some U.S. states, including California, give residents specific privacy rights against businesses above certain size or data-volume thresholds. We believe our business is below those thresholds today, so those laws may not formally apply to us. Pennsylvania has no comprehensive consumer privacy law at the time of writing. We honor reasonable requests from anyone in the manner described above whether or not a particular law applies.

California residents. California's "Shine the Light" law lets California residents ask which categories of personal information a business shared with third parties for their direct marketing. We do not share personal information with third parties for their direct marketing.

12. Do Not Track and tracking disclosures

  • Do Not Track and similar signals. Our Site does not track you across other websites or online services, and we do not use cookies, analytics, or advertising technology on it. Because of that, a "Do Not Track" or Global Privacy Control signal has nothing to switch off. The Site behaves the same for every visitor and does not change in response to these signals.
  • Other parties. We do not allow advertisers or analytics companies to place tracking technology on the Site. The service providers in section 7 (for example Cloudflare for hosting, and Resend for email delivery) necessarily receive technical data such as your IP address when they deliver content to you. We do not control how they use it; their own privacy policies apply to that.

13. Children

The Site is for business owners and is not directed to children. We do not knowingly collect personal information from anyone under 13. If you believe a child has sent us information, email us and we will delete it.

The Site links to LinkedIn and Instagram. Those sites have their own privacy practices, which this policy does not cover. The links do not load anything from those sites until you click them.

The sites under /demos/ are fictional concept sites that we made to show our work. The businesses, people, addresses, phone numbers and reviews on them are invented. Their forms are demonstrations that do not send or store what you type. Please do not enter real personal information into them.

15. Changes to this policy

When we change this policy we will post the new version on this page and change the effective date at the top. For a material change, we will also put a notice at the top of the Site's home page for at least 30 days, and, if we are in an active project or conversation with you, we may also email you. Please check this page from time to time. If we make a change that affects information you have already given us in a way you would not expect, we will ask for your consent before applying it to that information.

16. Contact

Exodus Core Solutions LLC
York, PA
Email: [email protected]
Phone: 717-478-1192