// Legal

Privacy Policy

Last updated: March 2026

Who We Are

Those Dark Arts is an independent creative technology studio. This policy explains what data we collect when you use this website and how we handle it.

Data We Collect

Contact form: When you submit the contact form, we collect your name, email address, and message. This information is used solely to respond to your enquiry.

MeshForge access: The MeshForge tool uses email-based one-time passwords (OTP) for authentication. Your email address is stored in Supabase (our database provider) to manage your session. Generated 3D models are stored in Supabase Storage for 30 days and may appear in the public showcase gallery. No uploaded images are retained after processing.

Analytics: We use Google Analytics 4 to understand how the site is used — pages visited, time on site, general location (country/city). No personally identifiable information is collected by GA4. You can opt out via browser extensions (e.g. uBlock Origin).

Bot protection: We use Cloudflare Turnstile on the contact form to prevent automated spam. Turnstile may collect signals about your browser environment to determine whether you are human. See Cloudflare's privacy policy for details.

How We Use Your Data

Contact form submissions are used only to reply to your message. We do not add you to any mailing list or share your information with third parties.

Analytics data is used in aggregate to improve the website. No individual tracking or profiling is performed.

Data Storage

Contact form submissions and MeshForge authentication data are stored in Supabase, hosted in the EU. Analytics data is processed by Google. We do not operate our own servers for user data.

Your Rights

You can request deletion of any data we hold about you at any time. Contact us via the contact page and we will respond within 30 days.

If you are in the UK or EEA, you have the right to access, correct, or delete your personal data under GDPR/UK GDPR.

Cookies

This site uses no advertising cookies. Google Analytics uses first-party cookies to track sessions. These are anonymous and not linked to personal identity.

Third Parties

We use the following third-party services: Supabase (database/auth/storage), Cloudflare (hosting, CDN, Turnstile bot protection, Workers), Google Analytics (analytics). Each has their own privacy policy.

Contact

For privacy questions, use the contact form.