What we keep, and why.

What we collect

The project form. Your name, email, any services you tick, a link if you give one, and your brief. The form also carries a hidden field that only spam bots fill in. Netlify Forms, our host, stores each submission in our Netlify account with the IP address and browser it came from, runs it through Akismet to filter spam, and emails it to our inbox. We use it to reply, to scope your project and to keep a record of the work we did together. We keep it while we are talking, and afterward as part of our records of jobs done; ask and we delete it.

Ask Highlark. The Ask panel is an AI assistant, not a person. Each time you send a question, the conversation so far is sent to a function on our server and on to Anthropic's API, together with the published text of this site, to write the reply. We do not send your IP address or any identifier with it, and we do not store the conversation. Anthropic's commercial terms say API inputs and outputs are not used to train its models and are deleted within 30 days. Questions are capped at 500 characters and eight turns. If it drafts a brief and you press to put it in the form, the draft is held in your browser's session storage just long enough to land in the form on the next page, then removed. Ask it about the studio and the work, not for anything private.

Server logs. Netlify records the standard request log for every visit: your IP address, browser, the pages you asked for and when. The Ask function logs errors only, never your question. That is how a site is run and kept secure. Netlify keeps those logs under its own policy.

Analytics. None today. No analytics script runs on this site. If we turn on Google Analytics 4 in future it will run with advertising storage off. GA4 does not store IP addresses. Outside the EEA, the UK and Switzerland it would set analytics cookies, and this page and the cookie section will say so on the day it starts.

Embedded posts. A few case pages carry Instagram posts. They load from Meta as you scroll toward them; until then there is only a link. Once loaded, Meta receives your IP address, your browser and the address of this site, may set its own cookies inside the embed, and may connect the visit to your Instagram account under its own policy.

Why we may. We act on your request when you send a brief or ask a question, and on our need to run and secure the site for the logs.

Cookies

We set none. The one thing we write to your browser is a brief drafted in Ask Highlark, in session storage, only when you press to put it in the form, and it is removed on the next page load. It is not a cookie. We do not track you across other sites, so we do not respond to browser Do Not Track signals; there is nothing to turn off.

Who else sees it

We do not sell or rent anything about you. These companies process data on our behalf, each only for the job named: Netlify (hosting, forms, logs), Akismet (spam filtering on the form), Anthropic (the Ask replies), our email provider (the inbox the form lands in), and Meta (the Instagram embeds, once they load). Each works under its own terms. We and these companies are in the United States. If you write from the EU or the UK, your data comes here; Netlify and Anthropic use the EU standard contractual clauses for that transfer.

Your side

Email us and we will show you what we hold about you, correct it, or delete it, wherever you live. We answer within a few days. If you sent a brief and changed your mind, say so and it is gone. If you are in the EU or the UK and we do not fix it, you can complain to your local data protection authority. If something goes wrong with your data on our side, we tell you.

Children

The site is for people who make and sell things. It is not directed at anyone under 18, and we do not knowingly collect anything from them.

Changes

When what the site collects changes, this page changes with it, and the date at the top moves.