Skip to content

Legal

Privacy policy

Last updated 18 October 2026

This policy explains what Sparen Studio collects when you use this website, why we collect it, and what we do with it. We keep it short and specific, because a policy you cannot read protects nobody.

Who we are

Sparen Studio is a Canadian design and technology studio. For any privacy question, or to exercise any of the rights below, use our protected contact form. Your request reaches the person responsible for this site.

What we collect

Information you give us

If you complete the enquiry form, we collect your name, email address and the type of project you choose. You can optionally include a project description, timeline, budget range and how you heard about us. If you start from a project example, that choice is included with your enquiry. We also attach campaign tags from the link you used to reach the site, when present, so we can understand which advertising led to an enquiry.

Information collected automatically

When you submit the form, our server uses a keyed fingerprint of your IP address to limit repeated attempts. We also compare keyed fingerprints of sender addresses and enquiry content to identify duplicates and unusual submission patterns. Suspicious enquiries are saved for review instead of immediately generating a notification. The enquiry record contains a shortened fingerprint of the IP address, your browser’s user agent, the referring page, a country code supplied by our host and the time of submission. We use these details to help prevent spam and investigate delivery issues.

We use Cloudflare Turnstile to check form submissions for automated abuse. It processes technical browser and network signals for this security check. Our host may also keep request logs to protect the site.

Why we collect it

  • To reply to you. If you send an enquiry, we use your details to answer it and to prepare a proposal.
  • To keep the site working and safe. The technical details above let us rate limit and filter automated abuse.
  • To understand what is useful. Analytics tell us which pages people actually read.

Submitting an enquiry asks us to contact you about that enquiry. It does not subscribe you to a promotional mailing list.

Analytics and advertising

This site uses the measurement tools below; individual pages may load different tools. They may set cookies or similar identifiers when you visit. The current enquiry form does not send your name, email address or project notes as analytics event parameters.

  • Google Analytics. Aggregate traffic measurement. See Google's privacy policy.
  • PostHog. Measures page visits, campaign sources and progress through the enquiry form, including validation errors and whether a submission succeeds. It also receives browser and device details, IP addresses and approximate location derived from those addresses. We use browser identifiers to connect these events. Names, email addresses and project notes are not included in these events; session recording, automatic interaction capture and person profiles are disabled. PostHog data is hosted in the United States. See PostHog’s privacy policy.
  • Microsoft Clarity. Some existing pages use Clarity to measure clicks, scrolling and page interactions through heatmaps and session recordings. See Microsoft’s privacy statement.
  • Meta Pixel. Measures the performance of our advertising and can build advertising audiences. See Meta's privacy policy.

You can restrict cookies and tracking through your browser settings or a tracker-blocking extension. Private browsing and a “Do Not Track” setting do not necessarily prevent all measurement. You can also opt out of Google Analytics with Google's opt out add on, and adjust advertising preferences inside your Meta account settings.

Who we share it with

We do not sell your information and we do not share it for anyone else's promotional purposes. It is handled by the service providers that run this site and its measurement: Cloudflare (hosting, storage and email delivery), our email and customer-management systems, and PostHog, Google, Microsoft and Meta (measurement and advertising). Each processes data on their own infrastructure under their own terms.

We may disclose information if the law requires it.

Where it is stored

Enquiries are stored in Cloudflare’s key-value storage. Protection counters and keyed fingerprints are stored in Cloudflare D1. Enquiries that are not held for review are sent to our email and customer-management workflow so we can respond and keep track of the conversation. Cloudflare and the analytics providers operate global networks, so your information may be processed outside your own country, including in the United States. Those transfers rely on the safeguards each provider publishes.

How long we keep it

We keep enquiries for as long as we may reasonably need them for the relationship they started, and no more than 24 months after our last contact with you, unless you become a client and a separate agreement says otherwise. Rate-limit windows last up to ten minutes, and duplicate checks use up to 24 hours of submissions. Expired counters and comparison fingerprints older than 48 hours are removed as new requests are processed. Review status stays with the enquiry. Ask us to delete your enquiry sooner and we will.

Your rights

You can ask us to show you what we hold about you, correct it, or delete it. You can withdraw consent to being contacted at any time. If you are in a region with additional rights, such as the UK or the European Economic Area, you may also have rights to restrict or object to processing and to receive your data in a portable form.

Send your request through our protected contact form and we will action it. There is no charge, and we aim to respond within 30 days.

If you are unhappy with how we responded, you can complain to the Office of the Privacy Commissioner of Canada, or to your local supervisory authority.

Security

The site is served over HTTPS only. The enquiry endpoint is rate limited, size limited, and restricted to requests from this site. Stored enquiries are held in access controlled infrastructure. No system is perfect, so please do not send anything highly sensitive through a web form.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe we have, tell us and we will delete it.

Changes

If we change this policy we will update the date at the top. Material changes will be described here rather than quietly slipped in.