This policy describes exactly what this website collects and why. It is written to match the code: if a field is not listed here, the site does not store it.
Last updated: 19 October 2026
The inquiry form is the only place where you enter personal data. Submitting it stores the following in our database:
To keep the form from being abused, each submission also records the browser user agent and a one-way hash of your IP address. The raw IP address is never stored: the hash exists so repeated submissions from the same connection can be rate-limited, and it cannot be reversed into an address.
The site sets no advertising cookies and runs no third-party trackers. Analytics is cookieless and only loads after you press “Allow analytics” in the consent banner; choosing “No thanks” leaves it off. You can change that choice at any time from the “Cookie settings” link in the footer.
Inquiries are kept for up to 12 months so we can answer them and keep an accurate project history. After that they are deleted automatically by a scheduled database job. You can ask us to delete an inquiry sooner.
The site is hosted on Vercel and the database and file storage run on Supabase. Both process data on our behalf under their own data-processing agreements. Email notifications about new inquiries, when enabled, are delivered through Resend.
You can ask what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Requests are handled by a single person — the studio owner — so there is no support queue in between.
To access, correct, or delete anything you have sent us, write to hello@widdx.com and we will respond within 30 days.
hello@widdx.com