The short version of the privacy policy, before the detail. This site sets no cookies at all, so you have not been shown a consent banner. There is nothing to consent to. It stores one item in your browser, a session entry holding campaign parameters so they survive if you move between pages, and your browser discards it when you close the tab. When you send a service request it collects what the form asks for plus your browser's user-agent and the page you submitted from, and it passes that to the independent company serving your area so they can contact you. The site does not store your IP address: the rate limiter keys on a daily-salted hash instead. It does not sell anything, share anything for advertising, or add you to a list because you asked for a quote. Everything below was checked against this site's own source code.
This page describes what this website does, checked against its own source code on September 27, 2026. Intentionally specific, not generic, since a policy describing behaviour a site does not have is worse than no policy.
Who operates this site
Burlington VT Chimney and Stove Repair is operated by AIXIS LLC, a Vermont limited liability company. There is no walk-in office and no published telephone line. Every request and every question reaches us through the request service form.
What we collect when you send a request
The service request form collects the service you need, your town, the appliance and its fuel, when it was last serviced, the property type, whether any stop-use situation applies, your description of the problem, your name, phone number, ZIP code, an optional email address, and your consent to be contacted. Nothing on that list is optional decoration. The appliance, fuel and last-service fields are what let a request be routed to the right person the first time, and they are collected for that reason.
Submitted alongside it are your browser’s user-agent string, the path of the page you submitted from, the referring path if it was inside this site, and any UTM campaign parameters present in the address. We do not collect a precise location, we do not ask for a street address in the form, and we never request payment details or identification documents.
Cookies and browser storage
This site sets no cookies. There are no analytics cookies, no advertising cookies and no social-media trackers, so you have not been shown a consent banner. There is nothing to consent to.
One item of browser storage is used: a single sessionStorage entry named hearth-attribution, which holds UTM campaign parameters and the page path so that information survives if you move between pages before submitting. Stored by your browser alone, it is cleared when you close the tab, and it contains nothing that identifies you.
Where the information goes
Requests are stored in a Cloudflare D1 database in the site’s own account. A notification is sent to a private internal address through Cloudflare’s email service. That address is not published anywhere on this site. Where a delivery endpoint is configured, the request is also sent to it over HTTPS, signed, and only to a host on an explicit allow-list.
Your request is then shared with the independent, qualified chimney or hearth service company serving your area, so they can contact you about the work. The sharing the consent checkbox describes, and it is the only sharing that happens. We do not sell information, we do not share it for advertising, and we do not add you to a marketing list because you asked for a quote.
Spam and abuse protection
The form is protected by Cloudflare Turnstile. When the form loads, your browser contacts challenges.cloudflare.com. Cloudflare processes that check under its own terms.
Submissions are also rate limited. That limit is keyed on a SHA-256 hash of your network address combined with a secret and the current date, so the stored value changes daily and cannot be reversed into an address. Your IP address itself is not stored.
The site-speed script
This site also carries a site-speed measurement script, loaded from cadence.dealersitespeed.workers.dev: the other third-party host this site’s pages cause your browser to contact. Loading it means your browser makes a request to that address, the way it does for any resource a page needs. The service is currently switched off for this site, it measures nothing and changes nothing you see, and the script is present only so it can be turned on later without a new deployment. If it is turned on, its job is to measure page-load performance to help make the site faster; it is not an advertising, analytics or marketing tool, and it does not build a profile of who visits.
Site signals
Where a page is not found, the requested path may be recorded so we can see which questions this site failed to answer. These records contain the path only. No identifier, no address and no session is stored with them, and they are used to decide what to write next.
How long information is kept
Service requests are retained while they are useful for handling and following up on the request, and are removed when they are not. Rate-limit records are deleted automatically after seven days. Session storage lives only until you close the tab.
Your privacy choices
You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. Send that request through the request service form and describe enough for us to find the record: the town and the approximate date are commonly enough. If you asked a service company to contact you and would rather they did not, tell us and tell them.
Children
This site is intended for property owners and occupiers arranging work on a building. It is not directed at children and we do not knowingly collect information from them.
Security
Traffic is served over HTTPS with strict transport security. Administrative pages are behind an identity check and are not reachable without one. Secrets are held as encrypted platform secrets instead of in the codebase. No system is perfect, and we do not claim otherwise.
Changes
When this policy changes, the review date at the top of the page changes with it. It was last checked against the source code on September 27, 2026.
What is collected, and what is not
Checked against this site's own source code. Anything in the right-hand column that changes is a change to the code, and this table changes with it.
| Collected | Detail | |
|---|---|---|
| Cookies | None | No analytics, advertising or social cookies; no consent banner because there is nothing to consent to |
| Browser storage | One item | A sessionStorage entry holding campaign parameters and the page path; cleared when the tab closes |
| Your request | Yes | Service, town, appliance, fuel, last service, property, urgency, description, name, phone, ZIP, optional email, consent |
| Technical data | Yes | User-agent, the page submitted from, an internal referring path, campaign parameters |
| Your IP address | No | Rate limiting keys on a daily-salted hash; the address itself is never stored |
| Precise location | No | Not requested and not derived |
| Street address | No | The form does not ask for one |
| Payment or ID details | No | Never requested by this site |
| 404 paths | Yes | Path only, with no identifier, used to decide what to write next |
| Third-party trackers | None | Two third-party hosts your browser contacts: Cloudflare Turnstile, and a currently-disabled site-speed script: see the privacy policy |