Privacy Policy

1. Who we are

This site, shapeshifters.dev, is run by Abu Heba for Project Management Services LLC, trading as Shape Shifters. We are a technology consultancy at Al SAQR Business Tower, DIFC, Dubai, United Arab Emirates.

This page is about the website: what the contact form collects, and what happens to it afterwards. It does not cover the material a client gives us once a project has started. That is dealt with in the agreement for that project.

If you have a question about this page, or about anything we hold about you, write to contact@shapeshifters.dev or call +971 50 101 7573.

2. The only form on this site

There is one form on this site: the contact form at /contact.

It asks for your name, your email address, and which of eight situations best describes yours. You can also add a phone number, a company or website, and a message of up to 1,000 characters. Nothing else on the site asks a visitor to type anything. The editor at /studio is for our own staff, and Sanity handles signing in there.

The message box is free text, so please keep confidential material out of it. Tell us enough to have a first conversation.

3. Where your enquiry goes

When you send the form, the details are emailed to our own inbox, contact@shapeshifters.dev, so a person can read them and reply. The email goes through Resend, an email service, and your address is set as the reply-to address.

You get one email back: a confirmation that it arrived, and what you picked, with the link to book the call. That is the only email we send you automatically. If you take a time in the calendar, Cal.com sends its own confirmation, invitation and any reschedule or cancellation notices.

Nothing you send is stored in the content system behind this website. Until 13 September 2026 enquiries were also saved there as records. They were exported to a file we hold offline and deleted.

4. What we do not collect

We do not log your IP address, your browser, or the page you came from. No code on this site records any of it. We hold no account and no password for you, and nothing here follows you from page to page or works out a score for you.

We set no cookies of our own. The one thing we keep in your browser is the analytics choice you make, and it never leaves your browser.

Two honest qualifications. If you accept analytics, Google sees your IP address, your browser and the pages you look at — that is the next section. And when something goes wrong on our side, the error is written to our host’s logs; if the failure was in sending your enquiry on, your address can appear in that log.

5. Cookies and analytics

We set no cookies of our own.

Google Analytics does not load until you accept it. A banner asks the first time you visit. Accept, and it loads, Google sets its own cookies, and it records the pages you open, your rough location, and the browser and device you use. Decline, or ignore the banner, and it never loads.

You can change your mind at any time with "Cookie settings" at the bottom of any page. The choice is kept per browser and per device, so clearing your site data brings the banner back. If you accepted before and decline later, collection stops at once, but cookies Google has already set stay in your browser until they expire.

There is no advertising pixel, no heatmap, no session recorder and no chat widget. The fonts are served from this site, so your browser makes no request to Google for them.

6. Who else handles it, and where

These services are involved in running this site.

• Sanity — the content system this site is built on. It holds the site’s own content: the words, the images, the case studies. It does not hold your enquiry. Images are served from Sanity’s image network, so it sees the requests your browser makes for them.
• Resend — sends the notification to us and the receipt to you.
• Cloudflare — hosts the site, so it sees the requests your browser makes, including your IP address. It caches public pages; nothing of yours is cached.
• Cal.com — runs the booking calendar on our contact page. See "Bookings" below.
• Google Workspace — hosts contact@shapeshifters.dev, the inbox your enquiry is delivered to and kept in.
• Google also provides analytics, but only if you accept it, and the map on the contact page, but only when you ask for it.

Our inbox keeps a copy of every enquiry, and so does Google Workspace, which runs that mailbox for us.

7. WhatsApp, maps and links off this site

The WhatsApp button opens a chat with our number, with an opening line already typed. We do not record the click, and nothing reaches us until you press send in WhatsApp. From there the conversation lives in WhatsApp and Meta handles it on their terms, not ours.

The contact page can show a Google map of our office. It does not load on arrival, and the analytics banner has no say in it: it loads only when you press "Show the map". Until then, your browser never contacts Google for it.

Everything else that leads off this site is an ordinary link. Once you follow one, that site’s own policy applies.

8. Bookings

The contact page can show our booking calendar. It is Cal.com’s page, running in a frame inside ours, and it does not load on arrival — it appears in step 02, only after you send your details. From that point Cal.com sees the request your browser makes and can set their own cookies inside that frame, under their terms.

What you type into the calendar — your name, your email address, anything you add — goes to Cal.com and comes to us as the booking. If you filled in our form first, your name, email address and message are carried to Cal.com in the address of that frame, so you do not type them twice. That address is in Cal.com’s own logs. The calendar does not show the message back to you, but it travels with the booking and reaches us.

You can book on cal.com directly instead, without this site being involved at all.

9. How long we keep it

The honest answer is that we have not set a period for the inbox, and nothing deletes itself there. Your enquiry stays in our mail until a person removes it.

Resend, Google Workspace, Cal.com, Cloudflare and Google Analytics each keep what they hold for as long as their own terms say. We have not set those either.

You can ask us to delete yours at any time. The next section says how.

10. Keeping it safe

The form posts to code running on our server, not from your browser to a database. The key that lets this site write to its content system never reaches your browser, and nothing you send is written there at all: your enquiry goes to our inbox and a receipt goes to yours.

We are a small team. The people who read your enquiry are the people who would do the work.

11. What we never do

We do not sell your details, rent them, or pass them to anyone for advertising. No advertising or marketing platform is connected to this site.

We do not add you to a list. One email is sent automatically: the receipt confirming your enquiry arrived. After that, apart from what the calendar sends about a booking, if a message arrives from us, a person wrote it.

If the law required us to hand something over, we would have to comply.

12. Enquiries sent by an AI assistant

We publish a machine-readable description of this site at /agents.json and /llms.txt. It documents the contact form as something an AI assistant can send on your behalf.

If you asked an assistant to get in touch, what it sent arrives and is handled exactly like a form you filled in yourself. We see what it sent us, not what you told it, and we cannot tell from the submission whether you typed it or an assistant did.

13. Asking for a copy, a correction or deletion

Write to contact@shapeshifters.dev and say what you want: a copy of what we hold, a correction, or deletion. Use the email address you contacted us from if you can, because that is how we find your message in the inbox.

We handle these by hand. There is no self-service button, and we have not set a turnaround time we are prepared to promise on this page.

14. Changes to this page

When how we work changes, we change this page and move the date at the top.

If you want to know what changed and when, ask us.

15. How to reach us

Email: contact@shapeshifters.dev

Phone and WhatsApp: +971 50 101 7573

Post: Abu Heba for Project Management Services LLC, Al SAQR Business Tower, DIFC, Dubai, United Arab Emirates.