Privacy policy

What we collect

Only what you give us, plus some basic information about how the site is used.

• Contact form: your name, email address, the project type you pick and your message, plus how you found us: the campaign tags on the link you followed, the page you landed on, and the site that sent you (just its domain). It’s delivered to our inbox by email. The site doesn’t keep a copy in its own database.
• Free website review: your website address, name and email, plus how you found us: the campaign tags on the link you followed, the page you landed on, and the site that sent you (just its domain, not the full address). We store this so we can do the review and follow up.
• Email: whatever you include when you write to us directly.
• Care plan checkout: payment happens on Stripe’s checkout page. Stripe collects your card and billing details. We get your name, email, the plan you chose and your subscription status. We never see or store your full card number.
• Clients: if you hire us, we keep what the work needs: your agreement, invoices, project files and our messages with you.
• Browsing: pages you visit, what you click, how you scroll and move around a page, your device and browser type, and your approximate location, through the analytics tools described below. Our host also logs IP addresses as part of serving the site.

How we use it

• To reply to you and do the review you asked for.
• To scope, build, support and bill for client work.
• To see which pages, campaigns and ads, including our TikTok and Reddit ads, lead to inquiries, so we know what’s working.
• To keep the site running, secure and free of spam.

We don’t sell your personal information. Sending a contact or review request doesn’t sign you up for marketing email.

Analytics and advertising

We use a few tools to understand how people find and use the site.

• Vercel Web Analytics and Speed Insights: page views and page-load performance, counted without cookies and reported to us in aggregate.
• Our own event log: records steps like opening the review form or sending the contact form, so we can see where people drop off. These records don’t include your name, email or IP address.
• Google Analytics and Google Ads: through the Google tag, Google measures page views, how the site is used, and whether a visit leads to a contact or review request. Google uses cookies and similar identifiers for this measurement and, depending on how Google and our ad account are configured, for advertising purposes as well. Our code tells Google that a request happened, not what was in it.
• TikTok Pixel and Events API: records page views, visits to our work, pricing, website redesign and AI website pages, when you start the contact form or click our email address, and whether a visit leads to a contact or review request, so we can see which TikTok ads bring in inquiries. Our server also sends TikTok these events directly, so they reach TikTok even if your browser blocks the pixel. The server copy includes your IP address, browser type, the page you were on, TikTok’s cookie ID and, if you came from a TikTok ad, its click ID. When you send a contact or review request, it also includes a one-way hash of your email address so TikTok can match the request to its users. As with Opinly, we treat that hash as personal information. TikTok never receives your name, your message or your website address. TikTok uses cookies and similar identifiers for this measurement and, depending on how TikTok and our ad account are configured, for advertising purposes as well.
• Reddit Pixel and Conversions API: records page views, visits to our work, pricing, website redesign and AI website pages, when you click through to the contact form, start it or click our email address, and whether a visit leads to a contact or review request, so we can see which Reddit ads bring in inquiries. Our server also sends Reddit these events directly, so they reach Reddit even if your browser blocks the pixel. The server copy includes a one-way hash of your IP address, your browser type, the page you were on, Reddit’s cookie ID and, if you came from a Reddit ad, its click ID. When you send a contact or review request, it also includes a one-way hash of your email address so Reddit can match the request to its users. As with Opinly and TikTok, we treat these hashes as personal information. Reddit never receives your name, your message or your website address. Reddit uses cookies and similar identifiers for this measurement and, depending on how Reddit and our ad account are configured, for advertising purposes as well.
• Opinly: runs our blog and provides analytics on page views, clicks, form activity and which campaigns lead to inquiries. If you type an email address into a form here, Opinly’s script sends it to Opinly and links it to your visit once you move on from that field, even before you submit the form. When you submit a form or buy a care plan, we also send Opinly your email address and a visitor identifier for attribution. Opinly says it stores a one-way hash of the address rather than the address itself. A hashed email can still be linked back to you, so we treat it as personal information. Apart from the email address, Opinly’s tracking doesn’t receive what you type into forms, so it never sees your message.
• Microsoft Clarity: records how visitors use our pages, including clicks, scrolling and mouse movement, and turns that into heatmaps and session replays, so we can see where the site is confusing or hard to use. Our forms are masked, so Clarity never records what you type into them. Microsoft uses cookies and similar identifiers for this measurement and, depending on how Microsoft and our account are configured, for advertising purposes as well.

Cookies and browser storage

The site itself stores a few small items in your browser:

• Whether you’ve dismissed or completed the website review offer, so it doesn’t keep popping up. This lasts between one day and six months, depending on what you did.
• How you arrived on this visit, which is sent along with a contact or review request if you make one. It’s cleared when you close the tab.
• If you arrived from a TikTok or Reddit ad, that platform’s click ID for the ad, which goes to that platform with the events described above and nowhere else. It’s cleared when you close the tab.
• A random value that decides which version of an offer you see. Also cleared when you close the tab.

These values don’t directly contain your name, email address or form contents. If you block them, core site functionality remains available, though the review offer may show up again.

Google, TikTok, Reddit and Microsoft Clarity set their own cookies. Opinly keeps a visitor ID, session details and any email address it has linked to your visit in your browser’s storage.

Who else handles your information

These services run the site and the business for us. Each handles your information under its own privacy policy. Beyond them, we only share information when the law requires it.

• Vercel: hosts the site and runs Web Analytics and Speed Insights. It processes every request, including your IP address.
• Resend: delivers contact form messages and review notifications to our inbox.
• Neon: hosts the database that stores review requests and event records.
• Stripe: handles care plan checkout, subscriptions and project invoices.
• Google: analytics and ad measurement.
• TikTok: ad measurement for our TikTok campaigns.
• Reddit: ad measurement for our Reddit campaigns.
• Opinly: hosts our blog content and runs the analytics described above.
• Microsoft: heatmaps and session recordings through Clarity.
• Cloudflare: manages our domain and forwards email sent to our address.

How long we keep it

We keep personal information for as long as reasonably necessary to provide our services, maintain business records, resolve disputes or meet legal obligations. In practice:

• Contact messages and emails stay in our inbox while they’re needed for the conversation and our records.
• Review requests stay in our database until they’re no longer needed for those purposes, or until you ask us to delete them.
• Client and billing records are kept for as long as accounting, tax and legal requirements say.
• Analytics providers keep data according to their own retention settings.

Your choices

You can ask us for a copy of the personal information we hold about you, or ask us to correct or delete it. Email hello@warpedwebstudio.dev and we’ll take care of it, wherever you live. Depending on where you live, the law may give you further rights, such as objecting to how your information is used. Ask and we’ll help.

You can also limit tracking yourself:

• Browser settings: block or clear cookies and site data. Core site functionality remains available if you do.
• Google ad settings: control how Google personalizes the ads you see.
• Google Analytics opt-out: a browser add-on from Google that stops Google Analytics from recording your visits.

Security

The site runs over HTTPS. Forms are handled on our server, service credentials never reach your browser, and access to stored requests is limited to the studio. No system is perfectly secure, but collecting as little as we do limits what could go wrong.

Children

This site is for businesses and isn’t directed at children under 13. We don’t knowingly collect their information. If you think a child has sent us something, email hello@warpedwebstudio.dev and we’ll delete it.

Other websites

We link to client sites, our Facebook page and other places we don’t control. Their own privacy policies apply once you leave this site.

Changes to this policy

When we change what we collect or how we use it, we’ll update this page and the date at the top.

Questions

Email hello@warpedwebstudio.dev with any question about your information or this policy.