Privacy Policy

When you submit a project brief or contact a studio, we collect the details you enter: your name, email, company, budget band, timeline, and message. When a studio is submitted or claimed, we collect the studio and account details provided.

Our application does not store your raw IP address with project briefs. Where IP-based abuse prevention is enabled, it stores a keyed one-way hash instead. Cloudflare’s processing for bot protection is described below.

Your shortlist is stored only in your own browser (localStorage) and never leaves your device until you send a brief.

Briefs are delivered to the studios you contact (or matched to relevant studios for general briefs). Transactional emails confirm your submissions. We never sell personal data, and we never charge clients.

The public directory works without tracking cookies. Signing in as a studio owner sets authentication cookies strictly required for your session.

We use Cloudflare Turnstile to protect our forms from spam and automated abuse. Turnstile runs in invisible mode, so checks take place in the background without a visible verification widget.

Cloudflare processes technical information, including your IP address, browser information, connection characteristics, and the website being visited, to detect bots. Cloudflare also uses these signals to improve Turnstile’s bot detection.

Details are set out in Cloudflare’s Turnstile Privacy Addendum and Privacy Policy.

Lead data is retained only as long as needed to deliver and follow up on your brief. You can request access, correction, or deletion of your data at any time by emailing privacy@webstudios.net.