Privacy
Last updated August 28, 2026
This covers vendettistudios.com and the sites we build and operate for clients. It is written to be read rather than to be survived, so it says plainly what we record and why.
What we record when you visit
Every page view on a site we operate is logged with:
- Your IP address, and the country, region and city it is registered to. This is an approximation of where a network is, not of where a person is.
- The page you opened, the page that referred you, and your browser’s user-agent string.
- The date and time.
We do not set advertising cookies, we do not sell or share this with anyone, and we do not buy data about you from anyone else. There is no login, no account and no name attached to any of it unless you gave us one yourself — by subscribing, or by writing to us.
Why we keep it
Two reasons. The first is security: sites get probed, scraped and hit by automated traffic constantly, and the only way to tell an attack from an audience is to be able to see the pattern. The second is knowing, in plain numbers, whether the work is reaching anyone.
We also compare addresses across the sites we operate, for one purpose: an address that appears on several unrelated client sites in a short window is almost always a scanner working through a list, and that is worth catching once rather than five times. We use it to spot machines, not to build a profile of a person or to follow anyone between businesses.
Under the GDPR this is our legitimate interest in the security of our network and of the sites in our care (Art. 6(1)(f), Recital 49).
How long
Ninety days by default, then it is deleted automatically. The exception is an address we have specifically flagged as hostile, which we keep with a note about why for as long as it is a live concern.
If your browser sends a Global Privacy Control or Do Not Track signal, we record the visit without your address or location at all.
Analytics on this site
vendettistudios.com uses Microsoft Clarity, which records anonymised session activity — clicks, scrolling and cursor movement — so we can see where our own pages confuse people. Microsoft processes that on its own terms. Client sites may use Google Analytics where the client has asked for it; where they do, their own site says so.
If you write to us or subscribe
A message through a contact form reaches our inbox and stays there. Subscribing takes a confirmation click before we will ever mail you, every mail carries a one-click unsubscribe, and lists are never shared between clients or sold.
Asking us to delete it
Write to [email protected] and say which site and roughly when you visited, and we will find it and remove it. You can ask for a copy of what we hold, or ask us to stop, on the same address. No account required and no form to fill in.