Privacy policy

This policy covers the website at ffstudios.io, operated by ("we"). It says what we collect, why, how long we keep it, and how to reach us about it. It is written to be read, not skimmed past.

What we collect, and why

Contact form. When you send a message we receive the name, email address, company, budget range, timeline, the capabilities you ticked, and the message itself. If you arrived from a link with tracking parameters, we also record the source of that link and the page you landed on, so we know which channel a conversation came from. We use this to reply to you and to prepare for the conversation you asked for. It is sent to our own mail server and read by the founders.

Newsletter. If you subscribe we store your email address and the time you confirmed. You receive a confirmation email first; nothing else is sent until you click it. Every email we send has an unsubscribe link that works in one click.

Analytics. We run a self-hosted copy of Umami, an analytics tool that does not use cookies and does not build a profile of you. It records page views, the referring site, browser type and country, and the events listed below, against a hashed identifier that resets daily. Because no cookies are set and nothing identifies you as a person, this site shows no cookie banner.

Conversion events. The analytics tool records when someone submits the contact form, clicks the WhatsApp link, opens the booking page, clicks a product call-to-action, runs the automation builder, or follows a link to our GitHub or documentation. These are counts, not profiles.

Visitor notice. When a page is opened, our server sends a short notice to a private Telegram channel read only by the founders. It contains the page path, the referring site, the browser type and the country. It does not contain your IP address or anything you typed. We use it to notice interest in a page while it is happening. If you would rather not appear in it, a browser extension that blocks scripts will stop it, and so will telling us.

Server logs. Our web server keeps standard request logs (IP address, path, time, browser type) for security and debugging. They are rotated automatically.

Bot protection. The contact form uses Cloudflare Turnstile to tell people from scripts. Turnstile may set a short-lived cookie of its own on that page only; Cloudflare's policy covers what it does with it.

What we do not do

We do not sell or rent your details. We do not use advertising trackers, remarketing pixels or social-media plugins. We do not send marketing email to contact-form addresses; the newsletter is opt-in and separate.

How long we keep it

• Contact-form messages: 24 months from the last message in the thread, then deleted, unless the conversation became a project, in which case the project records apply.
• Newsletter addresses: until you unsubscribe, plus a short suppression record so we do not email you again by mistake.
• Analytics: aggregated counts are kept indefinitely; the daily hashed identifiers are discarded automatically.
• Server logs: 30 days.
• Telegram notices: 30 days.

Where it is processed

Our mail, analytics and web servers are self-hosted and administered by us. Cloudflare sits in front of the site as a proxy and provides Turnstile. Telegram receives the visitor notice. No other third party receives visitor data from this site.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email with the address you used and we will answer within one working week. If you think we have handled your data badly, tell us first; if you are not satisfied, you can approach the data-protection authority that applies to you.

Changes

If this policy changes we update the effective date above. Material changes are noted at the top of this page for thirty days.

Contact

, , , , India. Email .