# legal/privacy.md
Privacy Policy
This Privacy Policy explains what information Studio Seventeen collects through this website, how that information is used and disclosed, and the choices available to you.
- Effective
- 2026-09-06
- Updated
- 2026-09-06
- Status
- Current
Scope and operator
This Privacy Policy applies to studioseventeen.io and the website features that link to it (the “Site”). Studio Seventeen operates the Site. Questions or requests concerning this Policy may be sent to hello@studioseventeen.io.
This Policy does not govern a third-party website or service merely because the Site links to it. A linked product or service may provide an additional privacy notice where its data practices differ.
Information collected
The information collected depends on how you use the Site. Studio Seventeen limits collection to information needed to operate, secure, understand, and improve the Site and to provide features you request.
| Category | What it includes | How it is collected |
|---|---|---|
| Hosting and request data | IP address, approximate location derived from IP, browser and device information, requested URL, referring page, date and time, response status, and security or diagnostic logs. | Collected automatically by Vercel and related infrastructure when your device requests the Site. The Site temporarily uses the forwarded IP address to rate-limit subscription requests. |
| Browser preference | Session storage records which navigation sections are open. | Stored in your browser only after you use the Site navigation. |
| Subscription data | Your email address, subscription status, confirmation and unsubscribe activity, and delivery metadata processed by Resend. | Collected when you submit the subscription form or interact with a subscription email. |
| Communications | Your email address and the content and metadata of a message you send. | Collected when you contact Studio Seventeen by email. |
How information is used
Studio Seventeen uses information to provide requested Site features, deliver subscription messages, respond to communications, protect the Site from abuse, diagnose failures, comply with law, and establish or defend legal claims.
Where applicable law requires a legal basis, processing is based on your consent when you subscribe; performance of a request or agreement when you ask for a feature or response; legitimate interests in operating, securing, and improving a minimal-data website; and compliance with legal obligations. You may withdraw consent without affecting processing that occurred before withdrawal.
Service providers and disclosures
Studio Seventeen uses service providers to operate the Site. They may process information under their own terms and privacy notices and only for the relevant service, legal compliance, security, or other purposes permitted by their agreements.
| Provider | Purpose | Information involved |
|---|---|---|
| Vercel | Hosting, content delivery, request handling, logs, security, and deployment. | Hosting and request data, including IP-derived information and diagnostics. |
| Resend | Subscription contact storage, confirmation emails, message delivery, and unsubscribe handling. | Email address, message and delivery metadata, and email interaction data handled by Resend. |
| Upstash | Pending email confirmations, confirmation receipts, and short-lived abuse limits when newsletter signup is enabled. | Pending email address, keyed hashes of confirmation tokens and abuse-limit identifiers, and confirmation date and policy version. |
Retention
- Navigation preferences last for the browser session or until session storage is cleared.
- Pending confirmation data expires after 24 hours. Abuse-limit records expire within an hour; resend cooldowns within five minutes. Confirmation receipts use a keyed email hash and expire after one year. Subscription information is retained while you are subscribed and as reasonably necessary afterward to honor unsubscribe requests, maintain suppression records, comply with law, and resolve disputes.
- Communications are retained as reasonably necessary to respond, maintain business records, and address legal or security matters.
- Hosting, security, and delivery logs are retained according to operational need and the applicable provider’s configuration and retention practices.
Your privacy choices and rights
You may unsubscribe through the link in a subscription email. Browser controls can clear navigation preferences. Contact the studio to request deletion of subscription records; suppression records may be retained to avoid further unwanted email.
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or an appeal, and to lodge a complaint with a data-protection authority. To submit a request, email hello@studioseventeen.io. Studio Seventeen may need to verify your request and may retain or decline information where permitted or required by law.
Because the Site does not sell personal information or use cross-context behavioral advertising, Global Privacy Control and Do Not Track signals do not trigger a separate advertising opt-out on the Site. Studio Seventeen will honor such signals where applicable law requires a different response.
Security
Studio Seventeen uses reasonable administrative and technical measures appropriate to the limited information processed by the Site. No method of transmission, storage, or security control is guaranteed to be completely secure. Do not send passwords, payment-card details, government identifiers, or other sensitive information by ordinary email.
International processing
Studio Seventeen and its service providers may process information in the United States and other countries where they operate. Those countries may have different data-protection laws. Where required, transfers will rely on a legally recognized transfer mechanism or other appropriate safeguard.
Children’s privacy
The Site is intended for a professional and general technical audience and is not directed to children under 13. Studio Seventeen does not knowingly collect personal information from a child under 13. If you believe a child has provided personal information, contact hello@studioseventeen.io so the information can be reviewed and deleted as appropriate.
Changes to this Policy
Studio Seventeen may update this Policy to reflect changes in the Site, providers, or law. The updated date will change when the Policy is revised. Material changes will be given additional notice where required by law.
Contact
Privacy questions and requests may be sent to hello@studioseventeen.io.