Legal
Privacy policy
This page explains what this website collects, where it goes, how long I keep it and how to have it deleted. It's written in plain English, and it describes how the site actually works today.
Effective October 17, 2026
Who I am
ByteRoc is the trading name of Moin Hossain, an independent email specialist in Dhaka, Bangladesh. I run ByteRoc myself, and I'm the person who reads what you send through this site.
Contact: hello@byteroc.com
What I collect
I collect only what you type into a form, plus a few details that come with every form. No form asks for payment details, and none needs a login.
The Shopper Test form (home page, pricing page, and the store pages):
- your store's URL;
- your name, if you give it;
- the email address the report should go to;
- your checked box confirming you own or work for the store and are asking me to run the test.
The store-page forms (/ecommerce/) also ask for one of these:
- your monthly store revenue range;
- the email platform you use.
The launch audit forms (/coach/):
- your name, email address and website;
- the platform you launch with;
- on one form, your email list size.
The quote form (pricing page):
- your name, email address, company or brand and website;
- your monthly revenue range and email platform;
- the project or services you're interested in;
- the message you write.
With every form:
- the date and time;
- which form you used;
- the page you sent it from.
If you arrived from a link with campaign tags, the form also sends those tags (utm_source, utm_medium and utm_campaign). They tell me which email or post brought you here. They don't identify you.
If you used the revenue calculator on the same page, the form also sends the two figures it showed: the monthly revenue you entered and the gap it worked out. The calculator itself runs in your browser and sends nothing unless you submit the form.
Email you send me at hello@byteroc.com, including anything you attach.
I don't ask for, and don't want, sensitive information such as health details or payment card numbers. Please don't put it in a message.
The Shopper Test: what happens on your store
When you ask for a Shopper Test, I shop your store the way a new customer would, for seven days. To do that:
- I sign up to your store's emails with test email addresses I own, on Gmail, Outlook and Yahoo. Where your store offers text messages, I may also sign up with a test phone number I own.
- I browse a few products, add to cart and start a checkout with a test address, and stop before paying. Nothing is ordered.
- I record the emails your store sends to those test addresses, with screenshots and timings.
Your store's own systems (for example Shopify and Klaviyo) will therefore record test subscribers and an unfinished checkout from me. My first-findings email lists the test addresses so you can leave them out of your numbers or delete them. On day 7 I unsubscribe every test address.
I never log in to your Shopify or Klaviyo account for the test, and I never see your customers' details.
For the comparison, I sign up to the public email lists of the three competitors you name, as any shopper could. I never place orders with them, and their emails appear only in your private report.
Your report is private. I don't publish it or name your store without your written OK. The one report page shown on this site is the exception: its store's name, people and links are blacked out.
Why I use it
I use what you send to:
- run the test or audit you asked for, and send you the findings and the report;
- reply to your question or quote request;
- follow up once about your report, about three business days after it arrives. If you don't reply, that's the last you hear from me unless you write again;
- keep a record of requests, so a request isn't lost if an email fails;
- keep the forms free of spam and abuse.
When you send a Shopper Test request, you may also get a short automatic email from hello@byteroc.com confirming it.
I don't add you to a newsletter. I never sell, rent or share your details for anyone else's marketing.
Where it goes, and who else handles it
When you send a form, two things happen:
- A record is saved on my web server, in a file kept outside the public part of the site. My web host is Namecheap.
- An email copy is delivered to my Gmail inbox (Google).
Email you send to hello@byteroc.com passes through my web host's mail server and is forwarded to the same Gmail inbox.
These companies store or carry the data for me. They don't get to use it for their own purposes:
- Namecheap: hosting, the form records, and hello@byteroc.com mail;
- Google: Gmail;
- Cloudflare: only if the analytics described below is turned on.
I don't share your details with anyone else unless the law requires it.
No other company collects information about your activity on this site over time or across other websites.
How long I keep it
| What | How long |
|---|---|
| Form requests and the emails about them (the server record and Gmail) | 24 months after our last contact, then deleted. If you become a client, I keep what our work and the law require for as long as tax and accounting rules say, then delete it. |
| Shopper Test material: the test emails, screenshots and recordings from your store | 90 days after your report. The report itself is kept with your request (24 months). |
| Spam log: form submissions blocked as spam or as too many in a row (time, reason, form, and the email address and store URL entered) | 90 days |
| Rate-limit record: a one-way scrambled code made from your IP address, with the times of your form submissions, used only to stop floods of submissions. It isn't your IP address itself. | Deleted automatically after 24 hours |
| Error log: technical errors, such as an email that failed to send. It doesn't record what you typed. | 90 days |
| Server logs kept by my web host (below) | Up to 30 days |
Server logs
Like almost every website, my web host keeps standard server logs: your IP address, browser type, the page requested, the referring page and the time. Its control panel can build traffic statistics from these. I use them only to keep the site secure and working.
Cookies, analytics and Do Not Track
This site sets no cookies. It runs no advertising trackers and no third-party scripts, and its fonts are stored on its own server.
The site keeps one or two short-lived values in your browser's session storage, and these are cleared when you close the tab:
- when you click a project's button, its name, so the form on the next page is pre-filled;
- if you arrived from a link with campaign tags, those tags, so the form can send them.
Analytics. This site runs no analytics script. If I turn on Cloudflare Web Analytics to count page visits, this paragraph will describe it.
Do Not Track. Because this site doesn't track you across websites, it treats every visit the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.
Your choices and rights
Email hello@byteroc.com at any time to:
- see what I hold about you;
- correct it;
- have it deleted;
- stop hearing from me.
I reply within one business day (Monday to Friday, US Eastern time) and act within 30 days. To protect you, I act on requests that come from the email address on the record, or I check with that address first.
Every follow-up email from me tells you how to stop further emails. A one-line reply is enough.
Where your data is stored
I work from Bangladesh. My providers may store data in the United States or in other countries. Wherever it's stored, it's handled as this policy describes.
Security
The site runs over an encrypted connection (HTTPS). Form records are stored outside the public part of the web server, and only I can reach them. No method of storage is perfect. If something goes wrong that affects your details, I'll tell you.
Children
This site is for businesses. It isn't meant for anyone under 16, and I don't knowingly collect details from children. If you think a child has sent me details, email me and I'll delete them.
Changes to this policy
When I change this policy, I update the date at the top. If a change matters, such as a new kind of data or a new company handling it, I'll say so at the top of this page for 30 days. Turning Cloudflare Web Analytics on or off isn't a change to this policy: this page already describes both, and the analytics paragraph shows which is in force.
Contact
ByteRoc · Moin Hossain · Dhaka, Bangladesh · hello@byteroc.com