This website is operated by Sam Potts, an independent web developer based in the United Kingdom. Sam is the data controller for personal information collected through this site. There is no separate data protection officer. For privacy questions or rights requests, contact [email protected].
What information is collected
You can browse most of this site without giving us personal information. If you use the enquiry form, we collect the details you choose to provide:
- your name, company and email address;
- the service, budget and timeline you select; and
- the project brief you submit.
The site also receives normal technical information from its hosting platform, such as request timestamps, IP address, browser and device information, and security logs. These logs are used to operate, secure and troubleshoot the service. The site does not intentionally use this information to identify visitors or build profiles.
How information is used
Enquiry details are used to respond to your request, discuss scope and provide the service you asked about. We do not sell enquiry data or use it for unrelated marketing.
The interactive prototypes use browser session storage to remember limited in-progress game or prototype state. This is not used for advertising or behavioural profiling.
Lawful basis
For an enquiry, processing is based on taking steps at your request before a possible contract. Technical security logs are processed under legitimate interests: keeping the website secure, available and usable. The optional metadata experiment is processed only with your consent, which you can withdraw by not running it.
Email delivery
When you submit an enquiry, the details are sent through Resend, a transactional email provider, so they can be delivered to Sam’s inbox. Resend processes the message content, sender address and delivery metadata on our behalf. The customer’s email address is included as Reply-To so Sam can respond.
Third-party services and links
This site loads fonts from Google Fonts and links to external services such as GitHub and LinkedIn. Google Fonts receives a browser request when the stylesheet loads; Google may process connection data such as your IP address under its own policies. External links may also process connection data when followed. We do not control those services.
The metadata experiment is a separate, opt-in feature. After you actively agree, it collects a limited technical snapshot such as browser, device class, screen and viewport dimensions, preferences, language, timezone, input capabilities, connection type, page path and referrer host. It is redacted in the browser and sent to this site’s AI endpoint, which may process it using LangGraph and DeepSeek to produce playful commentary. Do not submit passwords, API keys, private documents or other sensitive information. The output is not used for decisions about you.
Cookies and consent
See the cookie notice for a plain-language list of storage used by this site. Optional analytics and advertising cookies are not enabled by default. The small preference control records whether you accepted or declined so it does not ask again.
Retention and security
Enquiry emails are retained in Sam’s email account for as long as needed to respond and manage the potential project, then deleted when no longer needed. Technical logs and provider retention periods depend on the hosting and email services used.
Reasonable technical and organisational measures are used to protect information, but no internet transmission or storage system can be guaranteed completely secure.
Sharing and international processing
Information is shared only with service providers needed to operate this website and deliver a response, including the hosting provider, Resend for transactional email, and—only when you opt in—the AI services used by the metadata experiment. Resend states that its primary processing operations are in the United States and provides UK Standard Contractual Clauses/UK Addendum and Data Privacy Framework commitments for relevant transfers. Other providers may process information in other countries under their own terms and safeguards; see their current privacy and data-processing documents for details.
Your rights
Depending on your circumstances, UK data protection law may give you rights to request access, correction, deletion, restriction or a copy of your personal information, and to object to processing based on legitimate interests. You may withdraw consent for the optional metadata experiment at any time by choosing not to run it. Some rights have conditions or exceptions. To exercise a right, email [email protected]. You can also complain to the Information Commissioner’s Office.
Changes to this notice
This notice may be updated when the site, services or data providers change. The effective date is shown at the top of this page.