Privacy

What we collect, and what we don't.

This site is deliberately light on tracking. There are no advertising cookies, no cross-site trackers, and no data sold to anyone. This page explains exactly what happens to the information you send us.

Last updated

Who is responsible

CodeClaw Studios ("CodeClaw", "we", "us") is an independent software studio based in Malta, and is the data controller for information collected through this website.

For any privacy question or request, email hello@codeclawstudios.com. We answer privacy requests ourselves — there is no ticketing system in between.

What we collect

Information you send us. The contact form asks for your name, email address, and a description of what you want built. Company name and budget range are optional. That is the entire form — we don't ask for anything else, and you shouldn't send us confidential business information through it.

Anonymous usage statistics. We use Vercel Web Analytics to see which pages get visited. It is cookieless and does not build a profile of you or follow you across other websites.

Technical request data. Like any website, our host processes your IP address and browser user-agent in order to serve pages. We also hold your IP address briefly in memory — for ten minutes — purely to rate-limit the contact form against spam. It is never written to a database.

We do not collect special-category data, we do not run advertising or retargeting pixels, and we do not buy or sell personal data.

Cookies

This website sets no cookies of its own — no analytics cookies, no advertising cookies, no consent banner, because there is nothing to consent to. If that changes, this page will change first and we will ask for consent where the law requires it.

Why we're allowed to use it

When you submit the contact form, we process your details to answer you and to discuss a possible project — that is, to take steps at your request before entering into a contract (GDPR Article 6(1)(b)).

Anonymous usage statistics and contact-form spam protection rest on our legitimate interest in keeping the site working and understanding which pages are useful (GDPR Article 6(1)(f)).

Who else processes it

We keep the list of third parties as short as we can. Currently it is three:

  • Vercel — hosts this website and provides the anonymous usage statistics described above.
  • Resend — delivers your contact-form submission to our inbox as an email. Your message passes through their systems to reach us.
  • Fontshare — serves the fonts used on this site. Loading them means your browser makes a request to their servers, which exposes your IP address to them in the process.

These providers may process data outside the EU/EEA. Where they do, they rely on the European Commission's Standard Contractual Clauses or an equivalent transfer mechanism.

How long we keep it

Contact-form enquiries stay in our email inbox so we have a record of the conversation. We keep them for up to 24 months from your last contact with us, then delete them — unless we have started working together, in which case the correspondence is kept for the life of the engagement and for as long as tax and accounting rules require afterwards.

The rate-limiting record of your IP address disappears after ten minutes, and on every deployment. Anonymous usage statistics are retained by Vercel under their own retention schedule and are not linked to you.

Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. You can withdraw consent where we relied on it. We do not use automated decision-making or profiling.

Email hello@codeclawstudios.com and we will respond within 30 days. If you think we've handled your data badly, you can complain to the Office of the Information and Data Protection Commissioner (IDPC) in Malta, or to the supervisory authority where you live.

Security

The site is served over HTTPS with a strict Content Security Policy and related security headers. Contact-form submissions are validated on the server, rate-limited, and screened for automated spam. No system is perfectly secure, but we don't collect data we don't need, which is the most reliable protection available.

Changes

If we change what we collect or who processes it, we'll update this page and the date at the top of it. Material changes will be described here rather than made quietly.

Questions about this policy, or about our terms of use, go to hello@codeclawstudios.com.