Figment Studio

Privacy Policy

What this website records, and what it doesn't.

Last updated 30 July 2026

This policy covers figstu.com, the website. CropShot, our game, collects different things and has its own page: CropShot data & privacy.

The short version

This is a brochure site. There is no account to create, nothing to log into, and no newsletter. We don't sell your data or share it with anyone for their own purposes, and we don't run advertising here.

Visiting leaves the ordinary traces any web server records, plus privacy-focused analytics that don't identify you. The one place you can hand us something deliberately is the CropShot data-deletion form.

What we collect

Server logs. Like any web server, ours records the IP address, browser user-agent, page requested, and time of each request. We use these to keep the site up and to block abuse.
Analytics. We use Umami, which we run ourselves on our own server — the data is never sent to a third party. It records page views, referring site, and coarse device information such as browser, operating system, and screen size. It sets no tracking cookies and does not follow you between websites.
The data-deletion form. If you submit a CropShot deletion request, we store the device ID you enter and the IP address you sent it from. The form is deliberately open — no account, no proof of ownership — so the address is the only thing limiting how fast anyone can fire off requests against device IDs that aren't theirs. That is all it's used for, and it's discarded once the request is carried out.
Cookies. One security cookie, set only on pages with a form, to stop submissions being forged. Staff signing in to administer the site also get a session cookie. Simply browsing this site sets no cookies at all, and there are no advertising or cross-site tracking cookies anywhere on it — which is why you've never been shown a cookie banner. Full detail on the Cookie Policy page.

What we never collect

No name, email address, phone number, postal address, or payment details — we don't ask for any of them, because there's nothing here that needs them. If you email us, we have whatever you put in the email, and nothing more.

Other companies

There is one, and it's the company that rents us the server:

Our hosting provider. The machine this site runs on. They hold the data described above because they hold the hardware, not because we send it to them.

That's the whole list, and it's short on purpose. Loading this page contacts no advertising network, no content delivery network, and no analytics company.

Two things that would normally be on such a list aren't, because we moved them in-house. Our typefaces are served from this site rather than from Google Fonts, so Google never sees your IP address just because you loaded a page here. And our analytics run on our own server at analytics.figstu.com, so the measurements never leave our infrastructure.

How long we keep it

Server logs, including IP: 14 days, then deleted automatically.
Analytics: kept while the site is running. It doesn't identify you, so there's nothing to remove.
Deletion-request records: kept. The record that you asked us to erase something, and that we did, is the proof we honoured it — deleting that would leave us unable to show the request was ever handled. It also records whether the request ran on the weekly schedule or was carried out early by a member of staff, and who. The IP address you sent it from is not kept: it exists only to rate-limit the form, and it's discarded once the request is carried out.

Your choices

Your browser can block or delete cookies for this site entirely, and nothing here will break if you do — except the data-deletion form, which needs its security cookie to accept a submission. If you'd rather not be counted in our analytics at all, any content blocker or a browser "do not track" setting will stop the measurement script loading; the site works exactly the same either way.

Depending on where you live, you may have the right to ask what personal data we hold about you, to have it corrected or deleted, or to object to how we use it. Email us and we'll help. Because this site collects so little, in most cases the honest answer will be that we hold nothing tied to you.

Children

This website isn't directed at children under 13, and we don't knowingly collect data from them.

Changes

If this policy changes in a way that affects you, we'll update this page. It has no version history, so if the specifics matter to you, keep your own copy.

Contact

Email contact@figstu.com. Figment Studio, LLC is the data controller for this website.