Your privacy.
Pre-publication draft. The controller, address and email for exercising rights must be confirmed before receiving enquiries.
Controller and contact
Muddy Studio is the intended trading name. The final tax identity and contact details will be added to the legal notice.
Data used
Browsing generates technical data such as IP address, access date, browser and requested resources, processed by the hosting and security provider. No advertising, tracking or analytics tools have been added to the main website.
The contact form prepares a draft addressed to muddystudioweb@gmail.com in your email application. You can review it before sending. This website does not save the fields on a server or in browser storage.
Purposes and legal bases
Technical data enables website delivery and protection. Data you voluntarily send will be used to answer your enquiry and, where relevant, prepare or provide a service. The intended bases are legitimate interests in security and pre-contractual or contractual measures, depending on the purpose.
Recipients
Cloudflare is the intended hosting and security provider. The business contact email is muddystudioweb@gmail.com. Live payments are not yet configured. When you open external checkout, that provider receives the data you enter under its own privacy information. Muddy Studio does not receive your full card number or security code.
Retention and rights
Enquiries will be retained as necessary to handle them and meet applicable obligations; final retention periods and providers will be documented before contracting is activated. Where applicable, you may exercise rights of access, rectification, erasure, objection, restriction and portability with the controller, and lodge a complaint with the AEPD.
International services
Provider locations and safeguards for international transfers must be checked against their current terms before commercial publication.
Client area
Google and email-link access is prepared and awaiting activation. Once configured, Supabase will manage identity, sessions, project data and requests. The session is kept in browser local storage to maintain access and can be ended from the client area. Google is involved only if you choose that method.
Before activation, the controller’s identity and contact, legal basis, retention periods, providers and processing terms must be completed. To manage your data, see the contact page.