The short version

We collect the minimum needed to sell you a file and answer your email. We run no advertising, no tracking pixels and no profiling, and we never sell or share your details for marketing. We use one analytics tool — Google Analytics 4 — purely to count visits: consent-gated in Europe, one-click off everywhere else.

What we collect

• Orders: the email address you give at checkout, plus what you bought — needed to deliver download links and keep purchase records.
• Accounts (optional): your email and sign-in identity, held in our own authentication service. Verified accounts link to their past orders.
• Contact form: the name, email and message you send us.

Who processes it

• Stripe handles payment when checkout opens; your card details go to Stripe, never to us.
• Mailjet delivers our transactional email (download links, verification, replies).
• Google (Google Ireland Ltd / Google LLC) provides Google Analytics 4. It receives your IP address — used to work out an approximate location, then discarded rather than stored in reports — along with the pages you view and coarse device information. Data may be processed in the United States under Standard Contractual Clauses.
• Everything else — catalogue, accounts, files — runs on infrastructure we operate ourselves in Australia.

Analytics

We use Google Analytics 4, and only to answer questions like "how many people looked at the catalogue this week". It is never used for advertising: Google's ad signals are permanently denied, Google Signals is switched off, and we share nothing for ad purposes.

It never runs at all on your download pages, checkout, your account or the studio admin — those addresses are private, and a download link is a key to a file you paid for. We do not send the address of any page you visit with its query string attached, so nothing after the ? ever reaches Google.

In the EEA, the UK and Switzerland our lawful basis is your consent: nothing from Google is loaded and no analytics cookies are set until you accept. In Australia and elsewhere, where prior consent is not required for analytics of this kind, it runs on page load and you can turn it off in one click. Either way the choice is yours to change at any time — from Manage cookies in the footer, or on the cookie policy page, which lists every cookie we set.

You can also read Google's privacy policyor install Google's opt-out browser add-on, which blocks Analytics on every site you visit.

Retention and your rights

Order records are kept for tax and consumer-law purposes. Accounts and their data are deleted on request. To access, correct or delete what we hold about you, contact the studio — a real person answers, and the Australian Privacy Principles apply to how we handle it.

PRIVACY V2 · 2026