Privacy, in plain language.
This starter page explains the current site behavior. Jared and Esraa should review and complete it before launch.
Information you send
The contact form asks for your name, email address, and a description of your inquiry. Company, project type, budget, and timing are optional. The form also records the page from which it was sent. Do not include passwords, confidential credentials, or sensitive personal information.
How information is used
Inquiry information is used to understand and respond to your message. This starter site does not configure advertising or behavioral analytics.
Storage and access
Submitted inquiries are sent through Mailgun to the studio's configured inbox. When Firebase is configured, inquiries are also stored in Cloud Firestore. Access to these lead records is restricted to server-side operations and authenticated administrators whose Firebase user IDs are explicitly allowlisted. The server may temporarily use request network metadata for per-instance spam throttling; it is not added to the lead record. Mailgun and Firebase regions, accounts, and applicable provider terms must be confirmed by the studio before launch.
Email lists and preferences
The studio's private admin tools can store contact lists, names, companies, contact sources, and records of marketing permission in Firestore. Submitting an inquiry does not automatically subscribe you to marketing. Marketing emails are sent through Mailgun with a visible unsubscribe link. An opt-out applies across all studio marketing lists and is preserved if your address is imported again. Delivery receipts, failures, complaints, and opt-outs may be recorded; campaign open and click tracking are disabled.
Retention and requests
The studio has not yet chosen a retention period. Before launch, set a retention and deletion process. You may use the contact page to ask about a submitted inquiry or email-list record and request that it be corrected or removed, subject to applicable legal requirements. A minimal opt-out record may be retained to prevent future marketing messages.
Cookies and third parties
The site does not intentionally add advertising cookies or analytics trackers. Your selected color theme is saved in local browser storage; until you choose a theme, the site follows your device preference. Firebase Authentication may use browser storage when an administrator signs in. External links are opened on services with their own privacy practices.
Contact
Use the contact page for privacy questions. A named privacy contact and final policy date should be added before launch.

