Legal
Privacy policy
Last updated 22 July 2026
This policy covers personal data collected through sandcat.studio. The data controller is Sandcat Studios Ltd, company number 17355129, registered at 128 City Road, London, EC1V 2NX, United Kingdom. Contact us about anything on this page at privacy@sandcat.studio.
What we collect
- Contact form. Your name, email address, chosen subject and the message you write. We use it to answer you, and nothing else.
- Server logs. Our web server records IP address, timestamp, requested page, referrer and browser user agent. This is standard operation and security housekeeping.
We do not use advertising trackers, analytics profiling or third party marketing cookies on this site.
Cookies
One session cookie is set when you open the contact page. It exists to protect the form against cross site request forgery and expires when you close your browser. No consent banner is needed for it, because the site does not work without it.
Why we are allowed to hold it
- Legitimate interests for replying to enquiries, keeping the site secure and preventing abuse.
- Consent where you have signed up for development updates. You can withdraw that at any time using the unsubscribe link in any email.
How long we keep it
Contact messages are kept for up to 24 months so we have context if you write again, then deleted. Server logs are kept for up to 12 months.
Who else sees it
Our hosting and email providers process data on our behalf under contract. We do not sell personal data, and we do not share it for marketing. We may disclose data where the law requires it.
Some of the people and services that process data on our behalf are based outside the United Kingdom, so your data may be accessed from abroad. Where that happens we rely on appropriate safeguards such as the UK International Data Transfer Addendum.
Links away from this site
Discord, Reddit and hollowcedar.com are separate services with their own privacy policies. Once you follow a link, what happens to your data is governed by them, not by us.
Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email privacy@sandcat.studio and we will respond within one month.
If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
This site is not aimed at children under 13, and we do not knowingly collect their data. If you believe a child has sent us personal data, contact us and we will remove it.
Changes
When this policy changes we will update the date at the top of the page.