---
title: "Privacy and cookies"
description: "How Canvas Studio uses optional Google Analytics, remembers your preferences and handles launch-update signups through Resend."
url: "https://canvasforcraft.com/privacy/"
---

Your privacy

# Privacy and cookies

Analytics is your choice. You can explore Canvas Studio and request launch updates without accepting it.

Last updated 5 October 2026

## Who looks after this website

Canvas Studio is a product by LindemannRock. This notice covers canvasforcraft.com, its interactive demos and launch-update form. For privacy questions or to request removal of your signup address, contact [hello@canvasforcraft.com](mailto:hello@canvasforcraft.com).

## Your analytics choice

Google Analytics stays off until you choose Accept analytics. Rejecting it leaves the public content, demos and signup form available. We use your consent to enable this optional measurement; signing up for launch updates is a separate choice.

You can reopen Cookie settings from the footer or the button below. Withdrawing consent disables Analytics, removes its accessible cookies on this domain and reloads the page to remove the running Google tag. Unsaved demo and form changes are lost on reload. Withdrawal does not erase information already sent to Google.

## What Google Analytics receives

If you accept, Google receives usage and device information, such as the pages you visit, how you reached the site, browser and device characteristics and interactions measured by the Google tag. This helps us understand how people find and explore Canvas Studio. Our signup code does not send email addresses to Analytics.

We disable Google signals and advertising personalization in our tag configuration, and keep advertising consent denied. Google processes Analytics information using its infrastructure, which may include countries outside your own. Read [how Google uses information from partner sites](https://policies.google.com/technologies/partner-sites) for more about its processing.

## Cookies and browser storage

**Consent choice:**  `cfc_consent`  remembers your analytics selection for 182 days. Deleting it makes the banner appear again. The consent interface is self-hosted using Vanilla CookieConsent.

**Analytics cookies:** after acceptance, Google can set  `_ga`  and  `_ga_*`  cookies. We configure them to expire after 180 days without extending that expiry on each visit. Cookie expiry is separate from Google’s retention of information already collected.

**Appearance:**  `canvas-studio-appearance`  stores your chosen System, Light or Dark setting in this browser’s local storage. It stays there until you clear site data. Interactive demo choices stay in memory and reset when you reload; they are not saved to a Craft installation.

## Launch updates and contact

When you submit the launch form, we collect your email address and the submission time so LindemannRock can send you Canvas Studio launch updates. We use Resend to deliver your signup request to our team’s inbox. The form does not send an automatic confirmation email.

Your signup information is kept in our email workflow for handling your request and providing launch updates. You can withdraw your request at any time by emailing [hello@canvasforcraft.com](mailto:hello@canvasforcraft.com). We will stop launch updates and remove your address from the launch list. Operational copies in provider logs or backups may remain under their retention arrangements.

Resend and our email hosting provider process messages to deliver and store this correspondence. Read [Resend’s privacy policy](https://resend.com/legal/privacy-policy) for information about its service. If you contact us directly, we use the information in your message to respond.

## Hosting and security

InMotion Hosting serves the website and hosts our email. Cloudflare provides DNS and, where enabled, proxies website traffic. These providers may process connection information such as IP addresses, request details and browser information to deliver and protect their services.

Cloudflare Turnstile checks the signup form for automated abuse. It loads when you approach or focus the form, independently of optional Analytics consent. Cloudflare processes technical signals such as your IP address and browser information for this security check. We verify the resulting token with Cloudflare before sending a signup notification. Read [Cloudflare’s Turnstile privacy information](https://www.cloudflare.com/turnstile-privacy-policy/).

The signup endpoint also uses a hidden bot field, same-origin checks and a rate limit. It stores a keyed hash of the connection IP address and an attempt counter in a private file, rather than storing your email there. Counters expire after 15 minutes and are removed on a subsequent attempt. Hosting and security logs are separate from these counters.

## Your requests

You can ask us about information we hold about you, request a correction or deletion, or withdraw your launch-update request by contacting [hello@canvasforcraft.com](mailto:hello@canvasforcraft.com). Depending on your location, you may also have rights to restrict or object to processing, receive a copy of your information, or complain to your local data-protection authority. We may need enough information to verify a request before acting on it.

## Changes to this notice

We will update this page when the website’s handling of information changes. The date above shows when it was last updated. If the optional tracking purposes change, we will ask for a new consent choice.
