What we collect, and what we don't.

The short version

This site has no analytics, no advertising, and no tracking scripts. It sets one cookie, and only if you unlock a private case study with a password. The only personal information it collects is what you type into the project intake form, and we use that to reply to you.

The intake form

When you send the "Start a project" form we store what you entered — your name, email, company, what you're building, budget, and timeline — together with the IP address and browser identifier the request arrived with. We keep the IP address and browser identifier to tell real inquiries from automated spam. We do not sell, rent, or share this information, and we do not add you to a mailing list.

The form is stored in our database at Supabase, encrypted at rest. Two emails go out through Resend: one to us, and one acknowledgment to you. Those emails travel over TLS. Nothing about the form is end-to-end encrypted, so if you need that, email us directly instead — see below.

You can ask us to delete your inquiry at any time by writing to [email protected]. We'll confirm when it's gone.

Encrypted email

Our mailbox, [email protected], is on Proton Mail. Mail between Proton accounts is end-to-end encrypted; Proton cannot read it and neither can we until it's opened in our inbox. Mail from other providers is encrypted in transit and at rest on Proton's side, but not end-to-end. If you want the strongest option, write from a Proton address.

Cookies and local storage

• One cookie, unakin_cs, is set only when you unlock a password-protected case study. It remembers that you're allowed in for 14 days. It can't be read by scripts, it's sent only to this site, and it holds no personal information. Nothing else on the site sets a cookie, so there is no cookie banner: this one is strictly necessary for the page it protects.
• One local-storage key, sl.voice, on a case-study page, only if you choose a narration voice. It stays in your browser and never leaves it.

Third parties your browser talks to

• Hosting. The site runs on DigitalOcean, which keeps ordinary server logs (IP address, requested page, time) for operating the service.
• Fonts are served from this site. No font requests go to Google or anyone else.
• Embedded video on a case study loads from YouTube (privacy-enhanced mode, which sets no cookies until you press play) and Dropbox. Their policies apply once you interact with a player.

What we don't do

No analytics or usage tracking. No advertising or retargeting pixels. No fingerprinting. No selling or sharing of personal information. No AI training on anything you send us.

Your rights

Wherever you are, you can ask what we hold about you, ask us to correct it, or ask us to delete it. Email [email protected]. If you're in the EU, UK, or California, the rights those laws give you apply, and this page is how you exercise them. We answer within 30 days.

Changes

If this policy changes, the date at the top changes with it. We won't quietly start tracking you; anything that collects more than what's described here would be announced on this page first.