What we collect, and what we don't.

The short version

We count visits so we know whether this website is doing its job. We keep what you type into our form so we can reply to you. We do not sell your information, we run no advertising pixels, and nothing here follows you to another website.

When you just visit

Two tools count visits. They do different things and it is fairer to describe both than to lump them together.

Vercel Web Analytics

Vercel hosts this website and provides its visitor counter. It is cookieless: it sets no cookie, writes nothing to your browser's storage, and cannot identify you. For each page view it records the time, which page, where you arrived from, your approximate location no more precise than your city, and your device and browser type. Vercel derives a temporary identifier from the request and discards it after 24 hours.

Google Analytics

We also run Google Analytics 4. Unlike the counter above, Google Analytics does set cookies in your browser, and the information it collects is processed by Google under Google's own terms. It records broadly the same things: pages viewed, approximate location, device and browser, and where you came from. We use it because it holds our history going back to May 2026, and because ad blockers stop it often enough that the Vercel counter is the more complete of the two.

If you would rather not be counted by it, any browser ad blocker or Google's own opt-out add-on will stop it. The Vercel counter will still count the visit, anonymously.

Cookies

Google Analytics is the only thing on this website that sets a cookie. It sets two, named _ga and _ga_3N93FJCGVF, which exist so that two page views by the same browser are counted as one visit rather than two. They hold a randomly generated number, not your name or anything you typed.

You can clear them like any other cookie in your browser settings, and blocking them costs you nothing on this website: no feature here depends on a cookie. The Vercel counter sets none at all, and nothing else on the page writes to your browser's storage.

The specific actions we record

On top of page views, both tools record these five actions. None of them carries your name, email, or anything else that identifies you personally.

When you fill in the form

The form asks for your name, email, phone number, business name, trade, city, what you want the website to do, whether you have one already, and anything else you want to tell us. All of it is optional except your name, email and trade.

It is delivered to our inbox by Formspree, a form-handling service, which means your submission passes through their servers on the way to us, and a copy sits in their dashboard as well as in our email.

How long we keep it

Honestly: indefinitely. Your enquiry arrives as an email and it stays in that inbox, the same way any email you send a small business does. We are not going to pretend to a deletion schedule we would not actually keep.

What we will do is delete it the day you ask, with no questions and no delay. That request is the only thing that removes it, so if you would like it gone, email us and it is gone.

The two visit counters are different, because neither holds anything that points at a person. Vercel throws away the temporary identifier it derives from your request after 24 hours and keeps only the counts. Google Analytics deletes the detailed event and user-level data it holds after 14 months, automatically. That is the setting on our account.

We use it to reply to you and to prepare your website. We do not add you to a mailing list and we do not pass it to anyone else.

Other companies that see something

• Vercel hosts this website, so their servers handle every request, including your IP address.
• Google Fonts serves the two typefaces this site uses, so Google receives your IP address when a page loads, as it does across a very large part of the web.
• Google Analytics and Formspree, as described above.

That is the complete list. There is no advertising pixel, no session recording, and no heatmap tool on this website. If you inspect the page you will see a request to googletagmanager.com: that address serves the Google Analytics script itself, and there is no Google Tag Manager container running here.

Where your information goes

All four are American companies, so information about your visit, and anything you send through the form, is processed on servers outside Canada and is subject to the laws of the country it sits in, including lawful access requests there. We are a Canadian business and we are telling you this because you should know it, not because it is unusual: it is true of most websites you use.

Keeping it safe

This website is static. There is no database, no login, and no server-side code of ours for anyone to break into, which removes most of the ways a small website leaks information in the first place. The site is served over HTTPS only. Enquiries arrive as email and are read by one person, the studio's owner.

Your rights

Under Canadian privacy law (PIPEDA) you can ask us what we hold about you, ask for a copy, ask us to correct it, and ask us to delete it. Email ty@utopialabs.ca and you will get a real answer from a real person, normally within a few days.

If you are not happy with how we handle it, you can complain to the Office of the Privacy Commissioner of Canada.

Changes

If we add or remove a tool, this page changes in the same breath. The date at the top of this page is the honest one.