Estuaire Studio · Website privacy
Useful traffic signals, with a light footprint.
This notice covers the Estuaire Studio website. Each app has its own privacy policy for data handled inside the product.
Updated September 7, 2026
Short marketing links
A short link forwards to its saved destination, including an App Store listing. Only if you previously allowed analytics on this site, and no browser privacy signal is active, can it record a consented redirect open with the link’s assigned campaign and post labels. Without that permission it forwards without collection. These counts are not total clicks, unique people, downloads or purchases. A shared link keeps its original assigned channel.
Your choice comes first
Analytics is off until you choose Allow. If your browser sends Global Privacy Control or Do Not Track, the analytics collector does not store an event. You can change your choice below at any time.
What is measured
After permission, the site records page views and a small allowlist of useful signals: whether a product section becomes visible; whether a visit reaches 10 visible seconds, a second page, or a meaningful action; opening a product, support, Insights, or a social destination; changing language; using the contact email or an App Store link; and a feedback or waitlist submission being accepted. It can also record the referral domain, limited source, medium, campaign, content, product, and locale parameters, device class, and an approximate country or region supplied by the hosting edge.
What is not stored
The analytics system does not store raw IP addresses, full user-agent strings, full referrer URLs, advertising identifiers, form contents, or browser fingerprints. It does not set analytics cookies. Your allow or decline choice is saved only in local browser storage so the site can remember it. Feedback and waitlist records are stored separately and are never joined to analytics.
How a session is counted
A session is one consenting browser tab with activity less than 30 minutes apart. The random tab identifier is protected with a daily server-side HMAC before storage, so it is not a durable visitor identity. A session crossing midnight can be counted twice. Visitors are reported as privacy-safe sessions, not as identifiable people.
Storage and access
The Estuaire Studio website runs on OpenAI Sites and keeps a rolling 100-day window in its private D1 database. Cleanup runs with the next accepted event or owner dashboard refresh, so a quiet database can hold older rows until the next activity. Only the site owner can open the dashboard. Reports suppress geographic rows with fewer than 10 sessions.
Separate App Store reporting
The private owner area may import aggregate App Store downloads and estimated proceeds reported by Apple. Those reports remain separate from website sessions and cannot show which visitor downloaded, purchased, or subscribed.
Known limits
Cookieless, opt-in measurement intentionally misses visitors who decline, use privacy signals, block scripts, or leave before an event is sent. Referrers can also be hidden by browsers and other sites. Product funnels and campaign comparisons therefore show directional traffic patterns, not a complete census or individual visitor-to-purchase attribution.
Your analytics choice
Questions about this website notice can be sent to hello@estuaire.studio.