last updated: 5 june 2026
we collect the minimum we need to reply to you and run the studio. no ad trackers, no selling data, no dark patterns. here's exactly what happens to what you share.
1. what we collect, and when
You browse: we use Google Analytics 4 to understand how the site is used — pages visited, rough location (city level), device type, and how you found us. GA4 sets cookies to tell returning visitors apart. We don't run advertising trackers, and analytics data is aggregated — we're looking at trends, not at you.
You send the contact form: we collect what you type — name, email, phone, project type, budget range, your website if you share it, and your message. The form is protected by Cloudflare Turnstile, which checks browser signals (including your IP address) to tell humans from bots, and by rate limiting that briefly counts requests per IP address.
You subscribe to the newsletter: your email address. That's it.
2. what we do with it
Contact form submissions land in two places: an email notification to us (delivered via Resend) and a row in our lead tracker (Airtable). We use them to reply to you and follow the conversation — nothing else.
Newsletter emails go into our Resend audience. We send design notes and project drops; every email has an unsubscribe link, and unsubscribing works immediately. A newsletter, not a mailing list.
3. who processes it
A few services process data on our behalf, under their own privacy terms:
- Resend — email delivery and the newsletter audience.
- Airtable — lead tracking for contact-form submissions.
- Vercel — website hosting (standard server logs).
- Sanity — our content platform; it serves site content and images, not your personal data.
- Google Analytics — aggregated usage statistics (sets cookies; see above).
- Cloudflare Turnstile — bot protection on the contact form.
- Upstash — short-lived rate-limit counters keyed by IP address.
We don't sell or rent personal data to anyone, ever.
4. how long we keep it
Contact submissions: as long as the conversation (or potential project) is alive, plus reasonable business records.
Newsletter: until you unsubscribe.
5. your choices
Want your data corrected or deleted? Email hi@avval.in and we'll handle it — no forms, no friction. Unsubscribing from the newsletter is one click in any email.
6. security
Data moves over HTTPS and lives with the providers above, each with their own security practices. No system is perfect, but we keep the surface small by collecting little.
7. changes & contact
If what we collect changes, this page changes first — check the date above. Questions about your data: hi@avval.in.