Privacy

We store the name, email address, phone number (if you give one), the service you selected and your message. We use it to reply to your enquiry and, if you become a client, to keep a record of how the work started. We do not sell it, and we do not use it for marketing lists.

We use a self-hosted analytics tool to count visits and see which pages are read. It does not use cookies, does not follow you to other websites, and does not build a profile of you. That is why this site has no cookie banner: there is nothing to consent to.

This site sets exactly one cookie, and only if you sign in to the client portal:

• nw_session — keeps you signed in. It holds a random identifier, not your details, and is marked HttpOnly, Secure and SameSite so it cannot be read by scripts or sent from another site. Signing out deletes it.

There are no advertising, tracking or third-party cookies. Your light or dark theme choice is kept in your browser’s local storage, which never leaves your device and is not sent to us. That is why you see no cookie banner here — there is nothing to ask you to consent to.

Images and static files are cached by your browser so repeat visits are faster. Pages in the client portal are marked never to be cached or indexed, because they show one organisation’s private information.

Requests that match known attack patterns — probing for admin panels, configuration files, or injection attempts — are recorded with the source IP address, the path requested and the browser identifier. This is kept for up to 90 days so we can spot sustained attacks. Ordinary browsing is not logged this way.

We store your name, email address and a hashed version of your password. The password itself is never stored and cannot be recovered from the hash. Signing in creates a session recorded against your account, which you can end at any time by signing out. Your portal shows your own organisation’s information only.

Our website and database run on servers we manage. We do not pass your details to advertising networks or data brokers. Where a client project requires a third party — a payment gateway, for example — that is agreed with the client directly and described in that project’s own terms.

Enquiries are kept while they are useful for the relationship and then removed on request. Security logs are pruned after 90 days. Client records are kept for as long as we work together and for a reasonable period afterwards for accounting purposes.

Email info@nepalwebsites.com and tell us what you would like removed. We will confirm once it is done.

Nepal Websites, Tebahal, Sankata Mandir, New Road, Kathmandu 44600, Nepal. +977-9827944209.