Privacy, plainly.

Last updated: 17 August 2026

The short version

This site collects nothing about you unless you send the contact form, and sets no tracking cookies unless you press "Allow analytics". Decline, and every page works exactly the same.

Who I am

This is the personal site of Andrew Parton. Enquiries sent through it are handled by Doubleslash Studio, the company I co-founded. For anything about your data, use the contact form and say so - it reaches me directly.

The contact forms

If you send the form (on the home page or the contact page), I receive what you typed: your name, your email address, your message, and which of the two forms you used. That is the only route in - no addresses are published for scrapers to find.

The message travels over Amazon Web Services in the UK (API Gateway, Lambda and SES in the London region) and arrives as an email. I use it to reply to you, and for nothing else: no marketing lists, no sharing, no profiling. Enquiry emails are kept only while they are useful for dealing with your enquiry - ask and I will delete them.

The spam check on the forms

Both forms carry Cloudflare Turnstile, a spam check that works out whether you are a person without making you pick out traffic lights. Usually you will not have to do anything at all.

It only loads on the two pages that have a form, and only once you start filling one in - if you never touch the form, nothing is loaded and Cloudflare never hears from you. When it does run, Cloudflare receives your IP address, your browser's user agent, a technical fingerprint of the connection, and which site the check came from. Cloudflare states that these are used solely to tell people from bots, and not to identify, profile or advertise to anyone. It acts as my processor for this, and its own Turnstile privacy policy sets out the detail.

This one is not behind the cookie banner, because it is not tracking: it is a security measure protecting the form from spam, and without it the form would not work at all. The banner is for analytics, which is genuinely optional.

Cookies and analytics

By default: none. The site only asks once, in the banner, and remembers your answer in your browser's local storage (that single entry is strictly necessary - it is how the site remembers you said no - and contains nothing identifying).

If you allow analytics, the site loads Google Analytics 4, which sets _ga cookies to tell visitors apart and gives me aggregate numbers: which pages get read, roughly where visitors come from. Google acts as a processor and may transfer data to the US under the UK extension to the EU-US Data Privacy Framework. Google's own privacy policy is at policies.google.com/privacy.

Change your mind any time: press "Cookie choices" in the footer and answer again.

Hosting and server logs

The site runs on Amazon Web Services infrastructure. Like nearly every web server, AWS keeps standard access logs - IP address, time, page requested, browser type - used only for security and diagnostics, and kept briefly.

Playable demos and videos

The portfolio's playable games load from other domains (Doubleslash Studio's servers and Amazon CloudFront) only when you press View - at that point those hosts see your IP address, as with any page load. Videos are embedded through YouTube's no-cookie player and load nothing until you press play; once playing, YouTube applies its own policy.

Booking a call

The "Book a call" buttons on the home and contact pages open a booking window from Meetsy, the scheduling tool run by Doubleslash Studio. To make that work those pages load one small script from meetsy.app, whose server sees your IP address as with any page load - and nothing more unless you book. If you do book, the details you enter (your name, email address and chosen time) go to Doubleslash Studio to set up the call, and are used for nothing else.

Your rights

Under UK GDPR you can ask for a copy of what I hold about you, have it corrected or deleted, object to or restrict its use, and take it elsewhere. Given what this site collects, that will almost always mean an enquiry email - but the rights are yours regardless. Use the contact form, and if you think I have handled your data badly you can complain to the ICO at ico.org.uk.

Changes

If this policy changes, the date at the top changes with it. No silent edits.