Privacy

This policy applies to delvianstudio.com, its preview experience, and related pages or services operated by Delvian Studio. It does not govern a third-party website or service linked from our site.

• Information you send us: your name, email address, company information, project details, and the contents of messages or files you choose to provide.
• Email-list information: your email address, the specific list you request, and timestamped records of signup requests, confirmations, unsubscribe requests, and re-subscriptions.
• Preview information: a business name, preview code, optional PIN verification data, website assets, and records needed to publish, secure, expire, or revoke a concept preview.
• Website-scan information: the public website submitted, report-delivery email, terms version, scan status, redacted request destinations and query-parameter names, cookie and browser-storage key names without their values, form field names and types without submitted values, public-page screenshots, technical findings, report access and delivery state, and scanner version information. We use keyed hashes for email and client quota identifiers in the scanner database rather than storing the plaintext values there.
• Technical and security information: request details such as IP address, browser or device information, timestamps, and service logs. For preview rate limiting, we convert limited network and browser information into a keyed security hash rather than storing the raw combination in our preview database.
• Aggregate website measurements: Cloudflare Web Analytics provides page-view and performance measurements such as page path, referrer host, approximate country, device and browser category, and page-load timing. Cloudflare states that this service does not collect or use visitors' personal data, does not track people across websites, and does not log URL query strings.

We use information to respond to inquiries, prepare and deliver concept previews, run website scans you request, deliver private scan links and reports, provide requested services, send email updates you separately request, understand aggregate website usage and performance, maintain and secure our systems, prevent abuse, troubleshoot problems, keep business records, and comply with legal obligations.

Submitting an inquiry does not add you to a marketing list. If you choose an optional email list, we send a confirmation first and do not add the address unless that confirmation is completed.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

The public marketing site does not set advertising cookies or use cross-site behavioral advertising technologies. We use Cloudflare Web Analytics for aggregate page-view and performance measurement. Its browser beacon is cookie-free, and Cloudflare states that the service does not collect or use visitors' personal data or track individual visitors across its customers' websites.

When a PIN-protected preview is unlocked, the preview service may set a strictly necessary, HTTP-only session cookie named dv_preview. It is scoped to that preview and lasts no longer than four hours or the preview's expiration, whichever comes first.

When you submit or open a private website-scan report, the site sets a strictly necessary, HTTP-only session cookie named dv_privacy_scan. It authorizes one report for no longer than four hours. The emailed capability can establish another session until the report access expires.

We do not track visitors across unrelated websites for advertising. Because we do not sell or share personal information for behavioral advertising, Global Privacy Control and browser “Do Not Track” signals do not change the site's current behavior.

Cloudflare provides content delivery, website and Worker hosting, databases, queues, private object storage, browser execution for requested website scans, service logs and observability, security and rate limiting, Turnstile bot protection, and aggregate Web Analytics. Turnstile evaluates limited browser and request signals and produces a short-lived verification token when you use a protected form.

Resend delivers inquiry notices, meeting confirmations, requested website-scan links, and email-list confirmation and unsubscribe messages. Google provides the Gmail inbox that receives Delvian's internal inquiry notices. If you choose a Google Calendar link, Google processes that request under its own terms. Calendar applications you choose may also process an attached invitation when you add it.

When you request a website scan, the submitted website and the third-party services it loads receive ordinary automated HTTP or browser requests. Those recipients can observe the scanner's documented user agent, Cloudflare browser network address, requested public path, and normal request metadata under their own logging and privacy practices.

We may also disclose information to professional advisers or authorities when reasonably necessary to protect rights, investigate abuse, complete a business transaction, or comply with law. These providers and recipients process information under their own service terms and privacy commitments.

We keep information only as long as reasonably needed for the purposes described here, our business records, dispute resolution, or legal obligations. We retain email preference history as needed to document consent and continue honoring unsubscribe requests. Public preview access expires within the period assigned to that preview, which is no more than 90 days. For free website scans, the initial target is to delete raw screenshots and network evidence after 30 days and normalized reports, manifests, access records, and requester metadata after 90 days. A documented legal hold or a separate client engagement may require a different schedule. Some source files may be retained longer to support an accepted project or transfer of purchased work.

We use reasonable administrative and technical safeguards, but no internet transmission or storage system can be guaranteed completely secure.

You may ask us to access, correct, or delete personal information associated with you by emailing contact@delvianstudio.com. We may need to verify your request and may retain information where permitted or required by law.

You can stop list emails through the unsubscribe link in any marketing message. Career-list questions may also be sent to careers@delvianstudio.com.

If you no longer want a project preview available, contact us with the business name and preview code so we can review the request.

You may also request deletion of a private website-scan report by sending the report email and opaque request identifier. We may keep a limited deletion or legal record where reasonably necessary.

Our services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children under 13.

We may update this policy as our services change. Material updates will be posted here with a revised effective date.

Questions or privacy requests may be sent to contact@delvianstudio.com. Delvian Studio is based in Los Angeles, California.