Privacy
What this site collects, and why. Updated 2 October 2026.
Very little, and mostly what you write to us.
We do not run advertising cookies, advertising pixels or visitor-tracking analytics. The site keeps your light or dark choice, and whether you have already seen the intro, in your own browser’s storage; that stays on your device and is never sent to us. Our hosting and error-monitoring services, named below, may process technical data such as your IP address, your browser and what the page was doing, even if you never write to us. When you send the brief or email us, we receive your name, your email address, your company if you give it, and what you wrote. When you send a plan, we also receive your phone number if you give it, and your answers about the site you have in mind.
- Why
- To read your message and reply to it. Nothing else: no marketing, no list, not sold, and not shared beyond the services that carry it.
- How long
- Your submission exists as one email in our inbox and stays there until we delete it. The contact route also keeps a one-way hash of your IP address, email and message in server memory for about 30 seconds; the plan route keeps a one-way hash of your IP address and answers for about one minute. Both exist solely to catch an accidental duplicate click, can't be turned back into what you wrote, and are cleared automatically.
- Who carries it
- Resend delivers the email. Vercel hosts the site and keeps ordinary server logs under its own policy. Typefaces and the site's animation script are bundled into the site itself, not fetched from Google Fonts or jsDelivr, so those services never see your IP address. Upstash holds a short-lived counter keyed to a one-way hash of your IP address to block spam bursts on the submission forms; each counter expires after 60 seconds. Sentry watches the site for errors: it receives crash reports and a small sample of performance traces (about 1 in 10 in production, all of them in testing). It's configured to skip anything you typed into the form, so it never sees your name, email or message — only what the code was doing when something broke.
- Where it sits in law
- We are a Singapore studio, and the Personal Data Protection Act governs anything you send us.
See it, correct it, or have it deleted.
Write to contact@thornburystudio.com. A person reads it and replies.
If what this site collects ever changes, this page changes with it. The date at the top is the date the site last behaved differently.
Privacy
What this site collects, and why. Updated 30 September 2026.
What we collect
Very little, and mostly what you write to us.
We do not run advertising cookies, advertising pixels or visitor-tracking analytics. The site keeps your light or dark choice, and whether you have already seen the intro, in your own browser’s storage; that stays on your device and is never sent to us. Our hosting and error-monitoring services, named below, may process technical data such as your IP address, your browser and what the page was doing, even if you never write to us. When you send the brief or email us, we receive your name, your email address, your company if you give it, and what you wrote. When you send a plan, we also receive your phone number if you give it, and your answers about the site you have in mind.
Why, and for how long
- Why
- To read your message and reply to it. Nothing else: no marketing, no list, not sold, and not shared beyond the services that carry it.
- How long
- Your message exists as one email in our inbox and stays there until we delete it. The submission route also keeps a one-way hash of your IP address, email and message in server memory for about 30 seconds, solely to catch an accidental duplicate click; that hash can't be turned back into what you wrote and is cleared automatically.
- Who carries it
- Resend delivers the email. Vercel hosts the site and keeps ordinary server logs under its own policy. Typefaces and the site's animation script are bundled into the site itself, not fetched from Google Fonts or jsDelivr, so those services never see your IP address. Upstash holds a short-lived counter keyed to your IP address to block spam bursts on the contact form; each counter expires after 60 seconds. Sentry watches the site for errors: it receives crash reports and a small sample of performance traces (about 1 in 10 in production, all of them in testing). It's configured to skip anything you typed into the form, so it never sees your name, email or message — only what the code was doing when something broke.
- Where it sits in law
- We are a Singapore studio, and the Personal Data Protection Act governs anything you send us.
Your rights
See it, correct it, or have it deleted.
Write to contact@thornburystudio.com. A person reads it and replies.
If what this site collects ever changes, this page changes with it. The date at the top is the date the site last behaved differently.