Owner and legal review required before production launch
Current local behavior
This local build includes a dedicated inquiry database and private client/admin workspaces. It has no production analytics, advertising trackers, live affiliate cookies, click tracking, live email delivery or live payment processing. Stripe test integration remains disabled until test credentials are configured.
Project inquiries in local development
The contact and project forms send your contact information, selected service, project brief and optional budget/timing to a dedicated local Magic Pixels database. Administrator access is required to review them. Notifications are queued locally; no live email is sent. Do not enter confidential information. Production retention, deletion requests and the contact destination require owner and legal review before launch.
Abuse prevention and sessions
Short-lived form challenges and keyed hashes limit repeated requests. Raw IP addresses are not stored. Client invitations are stored as hashes and expire after 24 hours or one use. HttpOnly session cookies expire after one hour for administrators and eight hours for clients. These operational cookies are separate from affiliate tracking. Expired sessions and abuse-control buckets are removed during form initialization.
Affiliate application prototype
The creator application also validates only in the browser and stores nothing. Do not submit tax IDs, bank details, identity documents, passwords, or private analytics credentials.
Future attribution
Any future referral session requires reviewed consent, retention, access-control, and dispute rules. The default design excludes IP-address storage, fingerprinting, precise location, and cross-device tracking.
Future integrations
A production policy must be updated when hosting, analytics, form delivery, email, commerce, authentication, attribution, or payout providers are selected.