Privacy policy

This site doesn't track you with cookies, doesn't run third-party trackers or ads, and doesn't sell or share your data. The only cookies are the ones the cart needs when you use it, described below. We also measure how the site is used, in the privacy-friendly way described below.

What we measure

When you view a page, our own server records:

• the page address, and the website you came from (its domain only)
• campaign tags in the link, if any (utm_source, utm_medium, utm_campaign)
• your device type, browser and operating system, read from your browser's user agent
• how far down the page you scrolled, and how long you were actively on it
• clicks on “Buy on BuiltByBit” and searches in the catalogue

To count unique visitors without cookies, we combine your IP address and user agent with a random value that changes every day and is never stored, then keep only a one-way hash. Your IP address itself is never saved, and the hash can't identify you or link your visits across days. If your browser sends Global Privacy Control or Do Not Track, we don't measure your visit at all.

We use this to see which resources and pages are useful. Our lawful basis is legitimate interests. Analytics records are deleted after 13 months.

Server logs

Like any website, our server may keep short-lived technical logs (including IP addresses) to keep the site running and secure.

Your cart and signing in with BuiltByBit

The cart uses these cookies, and only once you use it. They're needed for the feature, so we don't ask for consent:

• sc_cart: the resources in your cart before you sign in. Kept for 30 days.
• sc_buyer: keeps you signed in with BuiltByBit. Kept for 30 days, or until you sign out.
• sc_oauth: a one-time code that protects the BuiltByBit sign-in. Deleted within 10 minutes.

When you sign in with BuiltByBit, BuiltByBit gives us your username and permission to manage your BuiltByBit cart. We store that permission encrypted and use it only to add, show and remove cart items and to start your checkout. Signing out deletes it here and cancels it at BuiltByBit; otherwise it's deleted after 30 days.

Buying

Purchases happen on BuiltByBit, not here: payment, tax, downloads and licences are all handled there, and BuiltByBit's own privacy policy applies to them. We never see your payment details.

When you press Pay on BuiltByBit in our cart, we note which of our resources you checked out and a scrambled form of your BuiltByBit member ID (not the ID itself). We keep it for 30 days so we can tell which sales came through this site. BuiltByBit also sends us a record of each purchase of our resources (the date, prices, fees and the same scrambled ID, never your name or payment details) for our sales figures.

Your rights

Under UK GDPR you can ask what we hold about you, and ask us to correct or delete it. We hold the checkout and purchase records described above, linked to a scrambled form of your BuiltByBit ID, and we can find and delete them if you tell us your BuiltByBit username or ID. Contact hello@studiocubed.com. You can also complain to the Information Commissioner's Office (ico.org.uk).