Reading this site is anonymous unless you choose otherwise. Nothing that identifies you is stored until you either accept analytics cookies, send a message, or buy something. There is no advertising, no profiling, and nothing is ever sold or shared for marketing.
Who is responsible
Structural Studio is operated by Devang Bhujbal, based in India, who is the data controller for the information described here.
Because the site is run from India, anything you send — a message, or the details of a purchase — is handled outside the UK and EU. That does not reduce your rights. This site is offered to people in the UK and EU, so UK and EU data protection law applies to it regardless of where it is operated from, and the rights set out below hold either way.
For anything on this page — a question, a correction, or a request to delete something — use the contact page.
Analytics
Two measurement tools run on this site, and they behave differently.
Cloudflare Web Analytics — always on
Cloudflare records that a page was viewed, along with the referring site, browser, operating system, country and page performance. It sets no cookies, assigns no identifier, and cannot follow you across other websites. Because it collects no personal data, it runs without asking and there is nothing to opt out of.
Google Analytics — only with consent
Google Analytics 4 (property G-DP111VJT0Q) gives more detail about how pages are used. It does set cookies, so it stays switched off until you accept it.
Until you accept, Google Consent Mode holds every storage permission in a denied state, and Google Analytics sends only cookieless pings — enough to count a visit, not enough to recognise you. Advertising signals are denied permanently, not just by default: this site runs no advertising and never requests them.
You can change your mind at any time using the Cookies link in the footer of every page. Declining after having accepted also deletes the cookies that were already set.
If you send a message
The contact form collects your name, email address, an optional subject line and your message. It is delivered by Formspree, which passes it on by email. That information is used to answer you and for nothing else — no mailing list, no marketing.
If you buy a pack
Purchases are handled entirely by Lemon Squeezy, which acts as merchant of record. They collect your name, email address, payment details and whatever billing or tax information the sale requires, and they deliver the file to you.
Card details never reach this site — checkout happens on Lemon Squeezy's own pages, and payment information is never seen or stored here. What comes back is the order record needed to provide support and meet accounting obligations.
Hosting and fonts
The site is hosted on GitHub Pages and served through Cloudflare. Both keep short-lived server logs, including IP addresses, to deliver pages and defend against attacks. This is ordinary infrastructure logging and applies to every visitor.
Typefaces are loaded from Google Fonts. Doing so sends your IP address to Google as part of the request for the font files. This happens before any consent choice, because it is part of rendering the page. If you would rather avoid it, a browser extension that blocks Google Fonts will not break the layout — the site falls back to system fonts.
Who processes what
| Service | What it handles | When |
|---|---|---|
| Cloudflare | Content delivery, security, cookieless analytics | Every visit |
| GitHub Pages | Hosting and server logs | Every visit |
| Google Fonts | Typeface files; receives your IP | Every visit |
| Google Analytics | Usage measurement, cookies | Only after you accept |
| Formspree | Contact form delivery | Only if you write |
| Lemon Squeezy | Payment, invoicing, file delivery | Only if you buy |
Each of these is an independent company with its own privacy policy. Some are based outside the UK and EU, so data may be transferred internationally under the safeguards those providers publish.
Cookies and local storage
| Name | Purpose | Set when |
|---|---|---|
| ss-consent | Remembers your cookie choice. Local storage, not a cookie, and never sent to any server. | When you choose |
| _ga | Google Analytics visitor identifier | Only if you accept |
| _ga_DP111VJT0Q | Google Analytics session state | Only if you accept |
That is the complete list. There are no advertising, social or third-party tracking cookies on this site.
Why we are allowed to hold it
- Consent — Google Analytics cookies. Withdrawable at any time, with no effect on anything else.
- Legitimate interests — cookieless analytics, server logs and security. Needed to keep the site working and understand whether it is useful, at minimal cost to your privacy.
- Contract — order and delivery records when you buy something.
- Legal obligation — sales and tax records, which have to be kept for a fixed period regardless of preference.
How long it is kept
Analytics data is retained by Google for up to 14 months, the Google Analytics default. Cloudflare's cookieless analytics are aggregated and hold nothing identifying. Messages sent through the contact form are kept as long as they are useful for answering you and any follow-up, then deleted. Order records are kept as long as accounting and tax rules require.
Your rights
If you are in the UK or EU you can ask for a copy of what is held about you, ask for it to be corrected or deleted, object to it being processed, or ask for it to be restricted. Ask through the contact page and you will get a reply within a month.
You can also complain to a supervisory authority — the ICO in the UK, or your national data protection authority in the EU — though raising it directly first is usually faster.
Changes
If what this site collects changes, this page changes with it and the date at the top is updated. Any change that materially affects your choices will reset the cookie banner so you can decide again.
This page describes actual behaviour rather than covering every hypothetical, and it is not legal advice. If a detail here does not match what you observe, that is a defect worth reporting — tell us and it gets fixed.