Privacy Policy

Forms you submit. If you request the Contact Patch cheat sheet or sign up for Workbench updates, we collect your email address (and, if you answer it, what you're designing). If you send a project inquiry, we collect your name, email, budget range, project description, and your company name if you give one.

Where you came from. When you submit a form, we also save the page you were on, the link or app that sent you (for example an Instagram link), and any campaign tags in that link. This tells us which videos, posts and emails are worth making more of.

Workbench accounts. To sign you in we keep your email address, which plan it has access to, and the order it came from. Sign-in works by an emailed link; we never store a password.

Purchases. Lemon Squeezy, our merchant of record, takes your payment. We never see your card details. We receive your name, email, country, what you bought, the price and the order number, so we can give you access and help with refunds.

Your designs. Your design files stay on your computer, and the app saves designs in your browser. Some calculations (loads, rule checks, "What moves this?" and some exports) run on our server: the numbers they need are sent over an encrypted connection, used to work out the answer and not stored.

Site and app usage. We use Google Analytics and PostHog to count visits and see which pages, buttons and Workbench features get used. These tools may set cookies or similar identifiers and receive your IP address, browser, device type and approximate location. The Workbench reports only a fixed list of usage events (such as opening a challenge), never your design.

Feedback and email. If you fill in a beta feedback form or email us, we keep what you send. We may email a team at the contact address it publishes about the Workbench beta; reply "stop" and we won't email that address again.

• To give you the Workbench you paid for, sign you in, and handle refunds.
• To send you the files you asked for and reply to your messages.
• To email you occasional Contact Patch or Workbench updates if you signed up for them. Every email has an unsubscribe link.
• To understand how people use the site and the Workbench, and improve them.

We don't sell your information. These services process it on our behalf:

• Cloudflare, which hosts the site, runs the Workbench's server calculations and stores form submissions.
• Supabase, which handles Workbench sign-in and the list of who has access.
• Lemon Squeezy, which takes payments, handles sales tax and VAT, and issues receipts and license keys.
• Kit, our email service provider, which sends the cheat sheet and updates.
• Google (Workspace email, Forms and Analytics) and PostHog, for email, feedback forms and analytics.

We may also disclose information if the law requires it.

We keep form submissions, email subscriptions and Workbench accounts until you ask us to delete them. We keep order records as long as tax and accounting law requires. Analytics data is kept according to each provider's retention settings.

We give everyone the same rights, wherever you live:

• to know what we collect and how we use it (this page), and to get a copy of it;
• to have it corrected or deleted, though deleting your account ends your Workbench access;
• to object to or restrict how we use it, and to unsubscribe from any email;
• not to be treated differently for using these rights.

Email projects@sunfish-labs.com to use any of them. We may need to confirm it's you before we act on a request. You can also block analytics cookies in your browser or with a tracker-blocking extension; the site works the same either way.

We use your information to provide what you asked for or bought (contract), with your consent for marketing emails, and for our legitimate interests in running, improving and telling teams about the Services. Our providers may process it in the United States, under the safeguards they offer for international transfers. You can complain to your data protection authority if you think we've handled your information wrongly.

The site isn't directed at children under 13, and we don't knowingly collect their information.

If we change this policy, we'll update the date at the top of this page.