Privacy | Love & Pixels

Status and controller

This draft describes intended processing. Verify the legal operator name, address and dedicated privacy contact before launch. Love & Pixels is the studio brand; this site does not establish a legal entity. A rights-request channel must be approved.

Information and purpose

Inquiries collect name, email, optional company, website, selected service, budget, message, a timestamp and consent version. Audit requests require a public website URL. Details are used to respond to the specific request and discuss a potential project. No marketing subscription is created. Do not send sensitive data or credentials.

Lawful basis

The operator must confirm the lawful basis for processing, including pre-contractual steps or legitimate interests where applicable. The request checkbox records acknowledgement and permission to respond, not marketing consent. This wording requires legal review.

Storage and processors

Development requests are stored locally in an ignored data directory and are not delivered to the studio. The planned production adapter uses an operator-controlled Supabase database. Optional Cloudflare Turnstile processes spam-protection signals. Hosting may process access logs. Confirm contracts, regions, subprocessors, transfer safeguards and access controls. No email provider is enabled.

Retention

Approve a retention schedule before launch. A proposed starting point is deleting unconverted inquiries after six months unless a continuing need or legal obligation exists. This is a proposal; automatic deletion is not implemented. Remove development test records before handover.

Rights and choices

Applicable rights may include access, correction, deletion, restriction, portability and objection, and complaint to a competent supervisory authority. Establish a verified contact and response procedure. No analytics or advertising trackers are active by default. Review the notice when providers or processing change.