The Creative Tribe

Privacy

This page describes the information this website handles. It does not set a retention period for enquiry records. Those records are kept so the studio can reply and manage the conversation.

Contact enquiries

The contact form asks for your name, email address, enquiry type, and message. The studio stores that submission so it can reply. The message is not sent to Cloudflare as part of the security check below.

Staff sign-in

Staff sign in with an email address and password. The password is stored only as a hash. A successful sign-in sets a session cookie named CTSESSID. That cookie is HttpOnly and SameSite=Lax, and it is used to keep the staff session signed in. The password is not sent to Cloudflare.

Cloudflare Turnstile

The contact form and the staff sign-in page use Cloudflare Turnstile in Invisible mode when the Turnstile keys are configured. The check runs in the background and does not show a puzzle. Cloudflare processes the technical signals needed to tell a person from an automated submission. Those signals are described in Cloudflare’s Turnstile Privacy Addendum.

The browser receives the Turnstile site key. The secret key stays on the server and is used only to validate the token with Cloudflare’s Siteverify service. A missing, invalid, expired, reused, or unverifiable token stops the enquiry or sign-in.

Hosting

When this website is served from Vercel, Vercel processes the connection data needed to deliver the pages.