Last updated: October 2026
Those Dark Arts is an independent applied AI lab and studio. This policy explains what data we collect when you use this website and how we handle it.
Contact form: When you submit the contact form, we collect your name, email address, and message. This information is used solely to respond to your enquiry.
MeshForge access: The MeshForge tool uses email-based one-time passwords (OTP) for authentication. Your email address is stored in Supabase (our database provider) to manage your session. Generated 3D models are kept on our media host (older ones in Supabase Storage) for 30 days and may appear in the public showcase gallery. No uploaded images are retained after processing.
Analytics: With your permission, we use Google Analytics 4 to understand which pages are useful and how the site is used. The Google tag is not loaded and no analytics data is sent unless you actively accept analytics. We do not use Google advertising or personalisation features.
Bot protection: We use Cloudflare Turnstile on the contact form and the Luna chat to prevent automated abuse. Turnstile may collect signals about your browser environment to determine whether you are human. See Cloudflare's privacy policy for details.
Mailing list: If you use the Notify box in the footer, we store your email address in our database (Supabase) and we receive a notification email through Resend. It is used only to tell you about new work.
Luna chat: Messages you type into the Luna chat are sent to our chat service and passed to third-party AI services: OpenAI moderation checks messages and replies, and a language model generates the reply. Please do not put personal or sensitive information in the chat.
Contact form submissions are used only to reply to your message. Mailing-list addresses are used only to tell you about new work. We do not sell your information or share it beyond the services listed below.
If you accept analytics, the resulting usage data is used in aggregate to improve the website. We do not use it for advertising or individual profiling.
Contact form submissions, mailing-list addresses and MeshForge authentication data are stored in Supabase, hosted in the EU (Ireland). Notification emails are sent through Resend. Analytics data, if you accept it, is processed by Google. We do not operate our own servers for user data.
You can request deletion of any data we hold about you at any time. Contact us via the contact page and we will respond within 30 days.
If you are in the UK or EEA, you have the right to access, correct, or delete your personal data under GDPR/UK GDPR.
This site uses no advertising cookies. If you accept analytics, Google Analytics may use first-party cookies to distinguish visits and sessions. Your consent choice is stored locally in your browser so the site can remember it.
We use the following third-party services: Supabase (database, authentication, storage), Netlify (hosting), Cloudflare (DNS, CDN, Workers and Turnstile bot protection), Resend (email delivery), OpenAI and a language-model provider (chat moderation and replies), Google Fonts (typefaces, loaded on every visit, so Google receives your IP address and browser details when a page loads) and Google Analytics (only if you accept). Each has its own privacy policy.