The short version
- We do not sell your data. Not to advertisers, not to data brokers, not to anyone.
- We do not use advertising or cross-site tracking cookies on this website.
- Our website analytics are first-party and cookieless. We never store your IP address.
- The only personal data we hold about most visitors is what you typed into a form yourself.
- You can ask us to delete everything we hold about you at any time by emailing hello@proscube.com.
The rest of this page is the detail behind those five statements.
Who we are
Proscube is an ecommerce growth studio. We are the data controller for personal data collected through https://www.proscube.com, and you can reach us at hello@proscube.com. This policy covers that website. It does not cover data we process on behalf of a client under a signed services agreement — in that arrangement we act as a processor, and the client's own privacy policy governs.
What we collect
There are three categories, and they are very different in sensitivity.
1. Information you give us directly. When you submit the contact form, a lead form, or a waitlist signup, we receive exactly the fields on that form:
- Your name
- Your email address
- Your phone number and country dialling code, if you enter one
- Your store or product URL, if you enter one
- Your company name, if you enter one
- The service you selected, if any
- The message you wrote
- The page you submitted from, so we know what you were reading
Waitlist signups on our "coming soon" pages collect only an email address and which section you signed up for. Nothing is pre-filled, inferred, or enriched from third-party databases — we know what you typed and nothing more.
2. Website analytics. We run our own analytics rather than handing your browsing to an ad network. For each page view we record: the page path, the referring site, an approximate location (country, region, and city) derived from your connection by our hosting provider, your device type, browser, and operating system, your screen size, and any UTM campaign parameters in the link you followed.
Two deliberate choices make this materially less invasive than typical web analytics. First, we never store your IP address — it is used only as an input to a one-way hash and then discarded. Second, that hash is re-salted every day, so the identifier representing you today cannot be matched to the one representing you tomorrow. We can tell that 40 people visited a page; we cannot build a profile of you over time, and we could not re-identify you even if asked to.
Requests from bots and crawlers are discarded before anything is written down.
3. Technical logs. Our hosting and database providers keep short-lived operational logs — the kind every website generates — for security, abuse prevention, and debugging. These may briefly include IP addresses. We do not use them for analytics or marketing.
Cookies and browser storage
This site sets no advertising cookies and no cross-site tracking cookies. That is why you do not see a consent banner demanding you accept them. The complete list of what we store in your browser:
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| ps_sid | sessionStorage | Groups the pages you view into a single visit, so a 6-page session is not counted as 6 unrelated visitors. | Cleared when you close the tab |
| proscube-tab | localStorage | Remembers which section of the site you last used, so you land back where you left off. | Until you clear site data |
| proscube-loaded | sessionStorage | Records that you have already seen the intro animation, so it does not replay on every page. | Cleared when you close the tab |
| ps-sticky-dismissed-* | sessionStorage | Remembers that you dismissed a call-to-action, so it stays dismissed. | Cleared when you close the tab |
| ps_admin | Cookie | Signs in our own staff to the internal admin panel. Never set for site visitors. | 7 days |
None of these follow you to other websites. Clearing your browser storage removes all of them, and the site works fine without them.
Why we use it
- To reply to you. If you send us a message, we use your contact details to answer it and to discuss the work you asked about.
- To run the business. If we go on to work together, we use your details to prepare proposals, contracts, and invoices.
- To understand the website. Aggregate analytics tell us which pages are useful and which are not, so we can fix the ones that are not.
- To keep the site up and secure. Detecting spam, abuse, and outages.
We do not use your data to train machine-learning models, we do not build advertising profiles, and we do not send marketing email to people who only filled in a contact form. Waitlist signups are the exception — those are an explicit request to be emailed when a section launches, and every such email carries an unsubscribe link.
Legal basis for processing
For visitors in the UK, EU, or another jurisdiction that requires one, our legal bases are:
- Consent — for waitlist signups and any marketing email. Withdrawable at any time, with no effect on anything processed before you withdrew it.
- Legitimate interests — for replying to enquiries, first-party aggregate analytics, and keeping the site secure. We consider these low-risk because the analytics are cookieless, non-identifying, and not shared.
- Contract — for the work itself, once you become a client.
- Legal obligation — for records we are required to retain, such as tax and accounting records.
Who we share it with
We share personal data only with the service providers that make the site run. Each is contractually bound to process data only on our instructions. We do not sell, rent, or trade personal data.
| Provider | What it handles | Where |
|---|---|---|
| Vercel | Website hosting, content delivery, and aggregate traffic measurement | Global edge network |
| Supabase | The database that stores form submissions and analytics records | Managed cloud infrastructure |
| Resend | Delivers the notification email when you submit a form | Managed cloud infrastructure |
| Google Fonts | Serves the typefaces the site is set in; your browser requests them directly | Google CDN |
| YouTube | Video embedded in some articles — loads only if you click play |
Because typefaces are served by Google Fonts, your browser makes a request to Google when a page loads. Video embeds in articles are deliberately built as click-to-play placeholders, so YouTube receives nothing about you unless you choose to watch.
We will also disclose data where we are legally required to — a valid court order or lawful request from an authority — and in the event we sell or restructure the business, in which case your data would transfer to the acquiring entity under the same commitments made here.
International transfers
Our providers run globally distributed infrastructure, so your data may be processed in a country other than the one you live in. Where data leaves the UK or EEA, our providers rely on Standard Contractual Clauses or an equivalent approved transfer mechanism.
How long we keep it
| Data | Retention |
|---|---|
| Form submissions and enquiries | Up to 24 months from your last contact with us, then deleted |
| Client records (contracts, invoices) | As long as required by tax and accounting law, typically 7 years |
| Analytics page-view records | Up to 24 months, and non-identifying from the moment they are written |
| Waitlist emails | Until you unsubscribe or the section launches and the list is retired |
| Provider operational logs | Short retention periods set by each provider, typically days to weeks |
Ask us to delete your data earlier and we will, except where we are legally required to keep a record.
How we protect it
- All traffic to and from this site is encrypted in transit over HTTPS.
- Form submissions and analytics are stored in a database that denies access by default; only our server, holding a secret key, can read or write them.
- The internal admin panel that displays enquiries requires authentication, is excluded from search engines, and is available only to us.
- We collect the minimum useful data, which is the most reliable protection there is — data we never collected cannot leak.
No system is perfectly secure. If a breach ever affects your personal data, we will notify you and the relevant regulator within the timeframes the law requires.
Your rights
Wherever you live, we will honour these requests:
- Access — a copy of the personal data we hold about you.
- Correction — fix anything inaccurate.
- Deletion — erase what we hold, subject to legal retention requirements.
- Objection and restriction — tell us to stop or limit a particular use.
- Portability — receive your data in a machine-readable format.
- Withdraw consent — for anything you consented to, at any time.
- Complain — to your local data protection authority if you think we have got this wrong.
Email hello@proscube.com to exercise any of these. We respond within 30 days. We may ask you to confirm your identity first — not to create friction, but so we do not hand your data to someone impersonating you.
Because our analytics identifier is anonymous and rotates daily, we genuinely cannot look up your browsing history from an email address. Access and deletion requests therefore apply to form submissions and correspondence, which is the only place we hold data tied to you.
Children
This is a business-to-business website. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, email us and we will delete it.
Changes to this policy
When we change this policy we update the "last updated" date at the top of this page. For material changes — a new category of data, a new provider, a new purpose — we will make the change prominent rather than quietly editing the text.
Contact us
Privacy questions, data requests, and complaints all go to the same place: hello@proscube.com. Write to us there and a person will answer.
This document is written to be read, not to be survived. If any part of it is unclear, tell us which part and we will rewrite it — get in touch.