Legal · WYRM.studios

Privacy Policy

Last updated: October 6, 2026

This policy explains what WYRM.studios (Tunis, Tunisia — studioswyrm@gmail.com) collects when you visit wyrmstudios.com or send a project request, why, and what happens to it. Short version: we collect the minimum needed to answer you and improve the site — no spam, no selling data, ever.

1. What we collect

When you send an inquiry (request form)

• What you type: name, email, phone (optional), brand/organization, industry, services you're interested in, budget range, how you heard about us, and any project details you add.
• Technical, for security and context: IP address (stored hashed for rate-limiting/spam defense), approximate city/country from your IP, browser and screen info, the page that sent you here, and your language and timezone.

When you browse the site

• Anonymous visit analytics: pages viewed, referrer, device type and approximate country — one row per page view, no cookies, no cross-site tracking, no advertising profiles.

2. Why we collect it

• To reply to your request and prepare a quote (legitimate interest / pre-contractual steps).
• To protect the form from spam and abuse (rate limiting, IP blocklist).
• To understand which pages help visitors and improve the site.
• To send you the automatic thank-you email after a request — transactional, not marketing.

3. What we never do

• No selling, renting or trading your data — with anyone, for any reason.
• No newsletters or marketing emails unless you explicitly ask.
• No advertising trackers or social-media pixels.

4. Where it lives & who sees it

Inquiries and analytics are stored in our team dashboard (hosted on Vercel with a Supabase database in the EU). Access is restricted to the WYRM.studios team. The thank-you email is delivered through EmailJS; your email address is used only to deliver it.

5. How long we keep it

• Inquiries: kept while the project relationship is active and archived afterwards for accounting and portfolio reference.
• Visit analytics: aggregated and periodically cleaned; raw rows are pruned as the dashboard self-maintains.
• Blocked spam IPs: kept to keep blocking them effective.

6. Your rights

You can ask us — at studioswyrm@gmail.com — to see, correct or delete everything tied to your email address, or to stop contacting you. We answer personally, quickly, and without bureaucracy. If you're in the EU/EEA, you also have GDPR rights (access, erasure, objection, portability); we apply them regardless of where you live.

7. Security

Data travels over HTTPS and is stored with row-level security enabled. Access keys are private. No system is perfect, but we minimize what we hold precisely so there's little to protect.

8. Children

The site is not directed at children under 16, and we don't knowingly collect their data. If you believe a minor sent us an inquiry, tell us and we'll delete it.

9. Changes

If this policy changes materially, the date above updates and, when practical, we mention it on the site. Continuing to use the site after a change means you accept the updated policy.