Current public-site behavior
Hosting and security providers may process normal request metadata such as IP address, timestamp, user agent, and requested path for delivery, reliability, and abuse prevention.
The current marketing code does not intentionally load advertising trackers or a behavioral-ad network. It emits bounded in-browser interaction events and allowlisted attribution values, but includes no lead-submission or third-party analytics transport.
When a monitored workflow-review destination is configured, the form prepares a local email draft. VehicleDesk receives nothing until the visitor chooses to send that email; when no destination is configured, the page does not ask for contact details.
Do not put customer records, credentials, provider secrets, financial data, or production exports into a public URL, workflow-review draft, or general contact message.