Your work,
kept yours.
A practical summary of what the site and project workspace collect, why we need it, and how files are handled.
Last updated October 28, 2026
What we collect
Account details (name, email, company, password hash), project briefs and messages, files you upload, billing and proposal records, and basic server logs needed to keep the service running and secure. Passwords are stored as scrypt hashes, never in plain text.
Why we use it
To create and secure your workspace, evaluate and deliver your project, communicate with you, prepare proposals and invoices, and protect the service from abuse. We do not sell your information or add you to a marketing list from the project form.
Project files
Uploaded files live in a private workspace outside the public website and are downloaded only through an authenticated route. Admins can download every project file. Client accounts can download files marked client-visible, plus files they uploaded themselves.
Sharing
We use hosting and infrastructure providers to run the site and store the workspace. We may disclose information when required by law or when necessary to protect the service, a client, or the studio. We do not share your project material with another client.
Cookies and sessions
The workspace uses a single HTTP-only session cookie to keep you signed in. It is not an advertising cookie. The public site does not run a third-party ad tracker.
Retention and access
We keep project and billing records for as long as needed to run the engagement, meet legal and tax obligations, and resolve disputes. You can ask us to correct your account details or close your account. Some records may be retained where the law requires it.
Security
We use HTTPS, hashed passwords, authenticated file routes, and access checks per project. No system is perfect. Do not send production passwords or private keys through the chat; ask for a secure handoff first.