Privacy Policy

1. Scope

This policy explains how First Light Studios handles information in connection with the website at flstudios.website. It describes what actually happens on this site today. It does not cover information handled under a separately signed client agreement, or the practices of other companies whose sites or platforms you may visit.

2. Information you provide

If you email us or contact us off-site, you may give us your name, email address, company, role, your message, and anything else you choose to include. We receive whatever you send.

When you submit the Growth Audit form, the details you entered — your name, work email, company, role, how long you have been selling online, your product category, whether you manufacture your own products, the channels you selected, your stated frustration, and your stated priority — are sent to our server and then stored in our email and contact platform, Brevo, so we can respond and arrange your audit.

When you subscribe to the newsletter, your name and email address are stored in Brevo on our newsletter list. Pressing Subscribe is your affirmative consent to receive marketing emails from us; the disclosure sits beside the button before you submit. Every newsletter includes an unsubscribe link, and you can also ask us to remove you at any time. We do not sell your information. If you need to reach us, email privacy@flstudios.website.

If you arrived through a campaign link, a small amount of non-identifying campaign metadata — the campaign source, medium, and campaign name from the link, checked against a strict, limited set of allowed values — may be sent with your form submission and stored alongside your contact record so we know which campaign the enquiry came from. Values that do not match that limited set are discarded.

3. Information collected automatically

This site is published on Lovable's hosting, which has built-in aggregate visitor analytics enabled by default. According to Lovable's documentation, it measures overall traffic — such as visitors, pageviews, views per visit, visit duration, bounce rate, source, page, device type, and country derived from your browser time zone. It does not build visitor profiles and does not follow people across separate visits.

This site also uses Google Analytics 4 to measure how the site is used — for example page views, which calls to action are clicked, when a form is started, and whether a Growth Audit request or newsletter subscription completed, together with non-identifying campaign source, medium, and campaign name. Google Analytics runs only after you allow analytics in the preferences banner, and it is switched off by default until you do. We do not send your name, email address, company, role, or any answer you typed into a form to Google Analytics.

Hosting and server providers also process the ordinary technical request data needed to deliver and secure the site. We do not control the exact fields those providers log or how long they keep them.

The site loads the Source Serif 4 and PT Sans typefaces from Google Fonts. When your browser fetches those font files, it makes a request directly to Google and, as with any web request, ordinary technical information such as your IP address and browser details may be sent to Google as part of that request. Google's handling of that data is governed by Google's own policies.

4. How we use information

• To operate, secure, maintain, and improve this website.
• To understand aggregate site performance and which pages are useful.
• To read and respond to communications you send us directly.
• To protect our rights and the rights of others, and to comply with law.

5. How information is shared

We may rely on vendors that act on our behalf or that are inherent to delivering the site — hosting, security, font delivery, email and contact management (Brevo), and measurement (Google Analytics). We may disclose information where we reasonably believe it is required by law or necessary to protect the safety, rights, or property of any person. If our business is ever transferred, information may transfer as part of that transaction.

First Light Studios does not currently sell personal information and does not share it for cross-context behavioral advertising.

6. Cookies and tracking

Google Analytics 4 sets measurement cookies, but only after you choose “Allow analytics”. Until then analytics storage is denied and no analytics cookie is set. Your choice is stored in your browser so we can remember it, and you can change it at any time using “Cookie Settings” in the footer. The campaign metadata described above is only saved in your browser after you allow analytics; until then it is held in the page for your current visit only. Declining analytics does not affect the forms or any other part of the site.

No Meta Pixel, advertising pixel, or advertising tracker is used on this site. We do not use cookies to profile you or to target advertising.

Hosting and service providers control their own technical mechanisms, which can include cookies or similar storage used to deliver and secure the site, so we do not claim that no cookie of any kind can ever be set.

7. Retention

Contact details and form answers submitted through this site are retained in Brevo for as long as we are working with you or have a reasonable business reason to keep them, and are removed on request. Newsletter records are kept until you unsubscribe or ask to be removed. Analytics data is retained according to the retention setting configured in our Google Analytics property. Communications you send us directly are kept only as long as reasonably needed for that communication, our business records, legal obligations, dispute resolution, and security.

8. Your choices and privacy rights

You can ask us to access, correct, or delete personal information we hold about you, and depending on where you live you may have additional rights under applicable privacy law. Email privacy@flstudios.website and we will respond as required by applicable law. We may need to verify your identity before acting on a request.

9. Children

This site is intended for a business audience. It is not directed to children under 13, and we do not knowingly collect personal information from children.

10. Security

We take reasonable measures to protect the information we hold, and we keep the site's data surface deliberately small. No website or method of transmission is completely secure, so we cannot guarantee absolute security.

11. Third-party links and services

This site references and may link to third-party platforms and resources. We do not control those services, and their own privacy policies and terms govern what they collect when you use them.

12. Changes to this policy

We will update this policy before or when our practices materially change — including if we change how form submissions are handled, change providers, or add or remove measurement tools. The "last updated" date above will change with it.

13. Contact

First Light Studios
privacy@flstudios.website