What we collect and why
- Visiting the site — Vercel Web Analytics records the page viewed, referrer, country or region, browser, device, OS and time. No cookies, no cross-site tracking; visitors are distinguished by an anonymous code discarded after 24 hours. Vercel also processes IP addresses in server logs for delivery and security. Basis: legitimate interest.
- Fonts — Google Fonts loads our typefaces, so your browser connects to Google, which receives your IP address and browser details.
- Enquiries — the contact form collects your email and, if you clicked a package first, the package selected. Basis: legitimate interest in answering enquiries and pre-contract steps.
- Trials and subscriptions — checkout runs on Stripe, which collects name, email, billing and card details. We never see or store card numbers. We keep your email, Stripe references, plan, billing interval and status, and record trial code usage.
- Downloads — plugin download links are temporary, valid for about ten minutes.
- Messages — Instagram and email messages are used to reply. For trial codes we keep name, email and code so each code goes to one person.
- Communications — we may email you about your enquiry, trial or subscription. No marketing list without consent; no automated decisions.
Cookies
We set no cookies and store no tracking information in your browser — which is why there's no cookie banner. Stripe checkout and Instagram follow their own policies.
Who we share it with
We don't sell personal information. It's shared only with service providers and where required by law: Vercel (hosting, analytics), Supabase (database, hosted in Frankfurt), Stripe (payments), Resend (transactional email), Google (fonts), Meta (Instagram messages).
Transfers outside the UK
Some providers process data in other countries, including the United States. Safeguards include the UK's approved transfer terms and the UK–US data bridge, via providers' data protection terms.
How long we keep it
Enquiries and messages: as long as needed to reply and follow up, or until you ask us to delete them. Customer records: during your trial or subscription, then as long as UK tax and accounting rules require — generally at least six years for financial records. Analytics is anonymous and aggregated.
Your rights
Under UK data protection law you can request access to your information and a copy of it; correction; deletion where there's no legal reason to keep it; restriction of or objection to its use; and your data in a portable format. Email fabian@axomaistudio.com — we reply within one month.
Complaints
Please raise concerns with us first. You can also contact the Information Commissioner's Office: ico.org.uk/make-a-complaint · 0303 123 1113.
Keeping it safe
The database is access-controlled, payments go through Stripe, and download links expire quickly. No system is completely secure.
Children
Our services are aimed at businesses, not children.
Changes
Changes to how we use personal information are posted on this page, with the date at the top updated.