This page explains what Dukai Studio (“we”, “us”) collects when you visit dukaistudio.com, sign up for The Dukai Letter or get in touch, and what we do with it. We are a consulting studio, not a data company: we never sell your information, and we gather only what it takes to keep this site running and to reach the people who asked to hear from us.
What we collect
Product analytics. We use PostHog, a product-analytics service, to learn how the site is used: which pages are read, which buttons are clicked and whether the newsletter form is submitted. It records the address and time of each page you view, the page or link that brought you here, your browser and screen size, and a rough location worked out from your IP address. It does not record what you type. To tell one browser from another it keeps a random identifier in your browser, in a cookie whose name begins withph_ or in local storage if cookies are blocked. If you subscribe to the newsletter we attach your email address to that identifier, so we know which pages a subscriber has read. The script loads only ondukaistudio.com itself and its subdomains, never on preview, staging or local copies of the site, and the data is held on PostHog's servers in the United States underPostHog's privacy policy.
Visit tracking for our CRM. We keep our notes on the companies we talk to in EngageBay, a customer-relationship tool, and its tracking script is part of this site. It records the address and time of each page you view and the site, link or campaign that brought you here, and sends that to EngageBay's servers, where your IP address arrives with it as it does with any web request. To tell one browser from another it keeps a random visitor identifier in your browser, in a long-lived cookie or in local storage, along with a session cookie that expires when you close the browser and a note of how you first found us. None of that carries your name. If you have given us your email address, for instance by submitting a form or opening a link in an email we sent, EngageBay joins your visits to your contact record and may keep that address in a cookie of its own, so that when we next talk we know which pages you have read. Like the analytics script, it loads only on dukaistudio.com itself and its subdomains, never on preview, staging or local copies of the site. EngageBay handles this data underits own privacy policy.
Newsletter sign-ups. When you ask to join The Dukai Letter we take your email address and send you a confirmation message. This is a double opt-in: nothing is sent until you click the link in that message, and if you never do, you are not subscribed and we do not write to you. We use the address for the newsletter and nothing else. It is never sold, never rented out and never used to advertise to you. Delivery runs through an email provider that we will name here before the first issue goes out. Every sign-up, confirmation and unsubscribe is logged with the time and the IP address it came from, which lets us show that each issue you receive is one you asked for. We also note whether an issue was opened and which links in it were clicked, which tells us what was worth writing. If you unsubscribe, your address moves to a suppression list so a later import cannot add you back by mistake.
Messages you send us. Write to support@dukaistudio.com and whatever you put in the message reaches us; we use it only to write back.
Request logs. The servers and content-delivery network behind this site keep standard request logs, which can include your IP address, the page requested and your browser's user-agent string. They exist for security, debugging and performance, and we do not use them to build profiles of visitors.
How we use it
- To run the site, keep it secure and make it better.
- To see which writing people find useful, so we can do more of it.
- To deliver the newsletter to the people who confirmed they want it.
- To answer you when you get in touch.
- To see which pages someone who has given us their email address has read, so a first conversation starts in the right place.
Personal information is never sold or rented, and nobody gets it from us for advertising.
Who processes it for us
A handful of providers process data for us:
- Email delivery — the service that sends The Dukai Letter and stores the confirmation records. We will name it here before the first issue; the subscriber list itself stays ours.
- Hosting and content delivery — the platform that serves these pages and keeps request logs for security and performance.
- Product analytics — PostHog, Inc. (United States), which holds the usage data described above. Its privacy policy is at posthog.com/privacy.
- CRM and visit tracking — EngageBay, which holds our contact records and runs the visit-tracking script described above. Its privacy policy is atengagebay.com/legal/privacy-policy.
- Anti-bot check — the sign-up form may run a brief automated check to tell people from scripts. It weighs your IP address and your browser's fingerprint, and when it has to ask you to confirm something it may keep a brief cookie for the duration.
Each of them handles data under its own privacy terms, and we pass along only what it needs to do its job. The site's typefaces are served from our own domain, so your browser makes no font request to a third party.
Cookies and browser storage
The site itself stores nothing in your browser beyond a momentary flag that smooths the transition between pages, and that is gone as soon as the tab closes. PostHog's analytics script, on the production site only, keeps the random visitor identifier described above in a cookie whose name begins with ph_ (or in local storage if cookies are blocked). EngageBay's tracking script, also on the production site only, adds its own visitor identifier, a session cookie, its note of how you first found us and, once it knows it, a cookie holding your email address. The sign-up form's anti-bot check may set a brief cookie of its own. We use no advertising cookies and no cross-site tracking. Block cookies or run a content blocker and the site works just the same.
We make no attempt to work out who an individual visitor is from third-party data; a visit only gets a name attached if you give us your email address.
How long we keep it
Analytics data stays only as long as it helps us understand how the site is used; we review and delete it periodically, and a subscriber's usage history goes when their subscription does. Visit records in EngageBay stay attached to the contact record they belong to for as long as we keep that record, and go when it goes. Email threads are kept for as long as they are needed to help you or to satisfy a legal duty.
Newsletter records are a different matter: leaving the list does not erase every trace of you. While you are subscribed we keep your address and a dated record of your confirmation. The moment you unsubscribe, sending stops, and two things stay behind: a suppression-list entry for your address, and a dated note of when you joined and when you left. The suppression entry stops a later import from putting you back by accident; the dated note is our evidence that we only ever sent what you asked for. Addresses that keep bouncing, or whose owners report an issue as spam, land on the suppression list too, unsubscribed or not. To have your data deleted, email us and a person will remove your subscriber record: there is no self-service deletion tool yet, and we would rather admit that than pretend otherwise. Two things deliberately outlive that deletion, for the reasons above: the suppression entry and the dated consent record. Delivery logs for issues already sent, bounce reports from the email provider among them, may also still hold your address.
Your rights and choices
- Every issue of The Dukai Letter carries an unsubscribe link, and unsubscribing takes effect at once.
- Email support@dukaistudio.com to learn which personal information we hold about you, or to have it corrected or deleted.
- Local privacy law may give you further rights depending on where you live (in the EU, the UK or California, for instance). We honour every valid request, wherever it comes from.
Children's data
This site is written for people at work and is not aimed at anyone under 13. We never knowingly gather information from a child.
When this policy changes
When this policy changes, we update this page and the date at the top. If a change materially affects how we handle newsletter data, we will say so in the newsletter itself.
Questions
If you have a question about this policy or about your own data, write tosupport@dukaistudio.com.