Privacy policy

This policy explains how Scundered Studio Limited handles personal data when you visit scundered.com or use our apps. We've kept it short because we collect very little.

Who we are

Scundered Studio Limited (registered in Northern Ireland, company number NI740378, Ground Floor, Gallery Building, 65–69 Dublin Road, Belfast, BT2 7HG) is the data controller for the personal data described in this policy. (UK GDPR Article 13(1)(a).)

For privacy queries, contact support@scundered.com.

What we collect on this website

When you visit scundered.com, we record limited information about your visit through Google Analytics 4 ("GA4"):

• Approximate location (country / region . derived from your IP address; we do not store the IP itself)
• Device type, screen size, operating system, and browser
• Pages viewed and time spent
• The website that referred you (if any)
• An ephemeral session identifier that lasts only for the current visit

We've configured GA4 in cookieless mode using Google Consent Mode v2 with all defaults set to "denied". This means:

• No analytics cookies (_ga, _gid etc.) are set on your device.
• No persistent identifier is created . we cannot recognise you across sessions or across devices.
• IP addresses are processed only to derive your country/region and are not stored by Google in your visit record.

Our hosting provider (Cloudflare) processes your IP address to deliver the site and to mitigate abuse (for example, blocking bot traffic). Cloudflare retains raw security logs for a short period (typically up to 30 days) and then deletes them.

We do not collect names, email addresses, payment details, or any other directly identifying information through this website. We do not run contact forms, accounts, or e-commerce on this site.

Registering interest in an app

Some of our app pages let you tap "Register your interest" for an app that isn't on a given store yet. When you do, we record that an interest was registered, which app it was for and which platform (Android or iOS), through Google Analytics 4. It's anonymous: no name, no identifier, nothing that points back to you. It only helps us count how many people want an app, so we can decide what to build next.

To avoid counting the same browser twice, we store one small functional flag in your browser's local storage once you've registered. It's a true/false marker, not an identifier, and it never leaves your device. See the Cookie policy for more on local storage.

What we collect through our apps

Each app we publish has its own privacy practices, described in an app-specific section below. As a baseline, none of our apps:

• collect data without telling you,
• sell your data, or
• share your data with advertisers.

If we ever change this baseline, we'll update this policy and flag it on the homepage.

Why we use it

We use website analytics to understand how people find the site and which content is useful, so we can improve it.

Legal basis: legitimate interest under UK GDPR Article 6(1)(f). Our legitimate interest is understanding aggregate site usage to improve the service. We've completed a Legitimate Interests Assessment which concluded the impact on individuals is minimal: the data is anonymous in practice, no profiles are built, and you can object at any time (see "Your rights").

Who we share it with

We use the following service providers (data processors) to operate the site:

Provider	Role	Location
Cloudflare, Inc.	Website hosting, security, edge delivery	Global edge network; corporate HQ in the United States
Google LLC	Analytics (Google Analytics 4)	United States

Both providers are bound by their own data processing terms (DPAs) under UK GDPR Article 28.

Transfers to the United States. Where personal data is transferred to the US, we rely on:

• Google LLC.the UK Extension to the EU–US Data Privacy Framework ("UK–US Data Bridge"), under which the UK Government has determined that DPF-certified US organisations provide an adequate level of data protection. Google LLC is DPF-certified . verify on the DPF list. (UK adequacy regulations under s.17A DPA 2018.)
• Cloudflare, Inc..the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (UK IDTA), executed as part of Cloudflare's Data Processing Addendum. (UK GDPR Article 46(2)(c).)

We do not sell data, and we do not share it with anyone else.

How long we keep it

Google Analytics retains event data at the shortest available retention period (14 months), after which it is automatically deleted. We do not export, copy, or extend this data into our own systems.

Cloudflare retains security logs for a short period (typically up to 30 days).

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you (Article 15)
• Ask us to correct inaccurate data (Article 16)
• Ask us to delete your data (Article 17)
• Object to our processing (Article 21)
• Restrict processing (Article 18)
• Receive your data in a portable format (Article 20)
• Lodge a complaint with the Information Commissioner's Office (Article 77 . see "Complaints" below)

Because we currently rely on legitimate interest rather than consent, the right to withdraw consent doesn't apply to this site. If we ever rely on consent (for example, for marketing emails) we'll explain it at the point of collection and you'll be able to withdraw it freely.

To exercise any of these rights, email support@scundered.com. We'll respond within one month.

In practice, because the website data we collect doesn't include a persistent identifier, we may not be able to link your specific records to a request . but we'll always reply.

Children

Our apps and website are not directed at children under 13. We don't knowingly collect personal data from children. If you believe a child has provided us with data, please email support@scundered.com and we'll delete it.

Security

We use industry-standard measures to protect personal data: TLS for all connections to the site and our apps; regular security updates to our hosting and analytics infrastructure; least-privilege access controls; and a no-export rule for analytics data (we don't copy it out of GA4 into our own systems).

Complaints

If you're unhappy with how we've handled your data, you have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

We'd appreciate the chance to address your concern first . please email us before going to the ICO.

Changes to this policy

If we change this policy we'll update the "Last updated" date and version above. Material changes will be flagged on the homepage for at least 30 days.