Privacy.
What this website does with data, and what has not been confirmed yet.
This notice covers this website only. It does not describe what any AlphaHQ product does with data; a product carries its own notice, and this one says nothing on its behalf.
Who this notice is from
AlphaHQ is the data controller for this website. Its registered name, company number, jurisdiction and full registered office are in the footer of every page, including this one.
Writing to AlphaHQ is a choice and never a condition of reading this website, and the registered office in the footer is the written route to the same place. No mailbox provider is confirmed for any address published here, so nothing on this page describes one as watched or as answered.
What this website handles
There is no sign-in here, no account, and no form to fill in. This website asks you for nothing and leaves nothing in your browser that identifies you. It sets no cookie, runs no JavaScript, loads no analytics or telemetry, requests nothing from any third party, and serves its own fonts from its own address.
Asking any website for a page means sending data all the same, because that is what a request is made of: the network address your device is using, the page you asked for, and whatever your browser attaches to the ask — its own version, your operating system, the language you prefer. That data is about you, and it reaches whichever server answers.
Why, and on what basis
There is one purpose: answering a request for a page so that you can read it. Nothing here profiles you, advertises to you, measures you, tests one version of a page against another, or passes anything on for someone else to use.
For the request data described above, the lawful basis is legitimate interests: the studio has an interest in publishing a website that can be reached and served securely, and against that sits the fact that the data is the minimum an ordinary web request is made of and is put to no other use.
If you write to the studio, the lawful basis for reading your message and replying to it is legitimate interests too. You chose to make contact, and a message nobody reads serves neither of us.
Who else is involved
This website is hosted by Fly.io, which acts as a hosting processor for it. A hosting provider necessarily receives each request in order to answer it: that is a statement about how a request reaches a server, and not a description of anything the provider chooses to do with it.
The application and the web server inside the machine the studio runs it on write no access log of their own, and neither of them sets or reads a cookie. What Fly.io itself records about a request is covered below, under retention.
There is no other recipient. No analytics provider, no advertising network, no third-party font or icon host, no error-reporting service and no mailing platform receives anything from this website, because this website asks nothing of any of them.
Where the data goes
The machine serving this website is configured to run in a single region, London. The studio itself moves no website data out of the United Kingdom.
Whether the hosting provider holds or copies any record of a request beyond that region is part of the same unconfirmed question as retention, immediately below. This notice does not assert an answer it does not have.
How long anything is kept
The studio keeps nothing from your visit. There is no database behind this website, no log written by it, and nothing left in your browser that identifies you, so on the studio side there is nothing to expire and nothing to delete.
If a message is received, the policy of the studio is to keep it only for as long as the exchange it belongs to is live, and to dispose of it once it is not.
How long Fly.io retains any record of the requests it answers has not yet been confirmed with them. Confirming it is outstanding work on the studio, recorded in this repository as an open item, and this notice will say what the answer is once there is one. Until then it states that the answer is unknown rather than guessing at it.
Your rights, and how to complain
Data protection law in the United Kingdom gives you the right to ask what data about you is held and to be given a copy of it, to have it corrected, to have it erased, to restrict or object to what is done with it, and to receive it in a portable form. Ask by writing to the studio; the registered office in the footer is the written route.
One limit is worth stating plainly rather than leaving you to discover it: for an ordinary visit the studio holds nothing about you, so there is nothing for it to show you, correct or erase. A request about a message you actually sent is a different matter, and can be answered.
If you think this website has handled your data badly, you can complain to the Information Commissioner, the supervisory authority for data protection in the United Kingdom, at ico.org.uk. You are welcome to raise it with the studio first, but you do not have to.
When this notice last changed
This notice was last updated on 2026-09-11. The date is written into the page and moves only when the words do, so a rebuild of the site cannot restamp it.