GOOD LANDING STUDIO

Privacy & cookies

Last updated October 29, 2026

Who operates this website

Good Landing Studio operates this website. For privacy questions or requests, email hello@goodlandingstudio.com. This policy covers the studio website, its illustrative concepts and its error pages.

Information you choose to provide

If you type a business name into the showcase name preview, the name appears on the current page. Only if you turn on “Remember my preview name” do we use session storage in your browser tab to carry it into the example websites and prefill the studio inquiry form. We do not put the name into page URLs or send it to the studio just because you preview a design. Use “Reset name” to clear a saved name, or “Privacy choices” to turn remembering off and prevent further name storage.

The inquiry form asks for your business name, email address, project type and a description. Reviewing the inquiry does not submit it, save those contact details in our browser storage or open your email app.

Please do not include payment details, passwords or sensitive personal information. Copy buttons use your device clipboard only when activated. Your browser, clipboard and email app may retain autofill information or drafts according to their own settings.

Questions in the studio guide

Ordinary topic matching runs in your browser and displays the studio’s published FAQ information. Where optional AI matching is offered, it is off until you select “Use AI matching.” Selecting this option does not create a conversation history or save the choice for another visit.

When you submit a question with AI matching selected, your question is sent to our Cloudflare-hosted endpoint and to OpenAI to choose a published FAQ topic. The response selects approved guidance; it is not a general chatbot, a binding quotation, a project commitment or access to client records. Please leave out passwords, personal account information and other sensitive details. If matching is unavailable or limited, published FAQ topics and the contact option remain available.

Cloudflare Turnstile checks requests for misuse before they reach OpenAI. When you request AI matching, a security cookie named __Host-gls-faq identifies a random session for up to 30 minutes. It is Secure, HttpOnly and SameSite=Strict. It is used for request limits, not advertising or cross-site profiling. We also keep request counts keyed to a daily, keyed hash of the connecting IP address; our application does not persist the raw address in these counters. Session counters expire after 30 minutes, network counters at the next UTC day, and daily/monthly API-reservation counters at the next UTC day/month. Expired records are removed by scheduled cleanup. Our application does not store question text, Turnstile tokens, a conversation transcript or the daily IP-hash secret in these counters.

Our application does not log raw questions. Hosting and security providers process connection metadata, and operational logs/traces may record request timing, route and status information. OpenAI and Cloudflare handle requests under their own policies and applicable service terms; this is not a promise of zero provider retention. See OpenAI’s API data controls and Cloudflare’s privacy policy.

When you choose to carry a question into the contact form, tab session storage under gls-question-handoff-v1 transfers only that question, with a five-minute expiry. It is removed when the contact page reads it; expired records are rejected and removed on the next read. The question is not placed in a URL. If storage is blocked, you can copy it yourself. This requested transfer does not turn on optional preview-name memory.

On the contact page you can edit the question and add your details. Nothing is submitted to the studio until you review the inquiry and choose “Send inquiry.” We do not collect questions for analytics.

Service providers and sharing

Our website host processes connection information such as IP addresses, request details and device information to deliver and protect the site. Public hosting is provided by Cloudflare; see Cloudflare’s privacy policy. Private review hosting may use OpenAI, in which case this link identifies that provider.

Messages you send to our current studio inbox are processed through Gmail in Google Workspace. See Google’s privacy policy. We may share relevant inquiry information with service providers needed to handle your request, or when required by law. We do not sell inquiry information or share it for cross-context behavioral advertising.

Formspree processes submitted inquiries as our form-delivery provider. See Formspree’s privacy policy. Its free-plan submission history is available for 30 days. Removing that history does not remove an email already delivered to our inbox.

Cookies and local storage

The website itself sets no cookies. When you choose “Essential only,” save privacy choices, or use the name-memory checkbox, we save that choice on this device in local storage under gls-privacy-choice-v1. It contains the version, time and your name-memory setting, not form entries. The choice expires after 90 days and is checked when the page loads or returns through browser history. This storage is used to honor your choice.

Name memory is optional and off by default. If you enable it, the preview name is stored under gls-preview-name-v1 in session storage, with an expiry 30 minutes after you last change the name. Turning name memory off removes the stored name and prevents new name-storage writes. You can still try a name on the current page. Session storage belongs to the browsing tab; browser session restoration may restore it until the expiry check. If browser storage is unavailable, the site still works, but preferences may not survive navigation.

An older version saved a notice acknowledgment under good-landing-privacy-v1. That record does not enable optional storage and is no longer used. The clear button below attempts to remove both the old record and current preferences.

Hosting providers may use essential security or access cookies. “Essential only” disables our optional name memory; it does not disable hosting security, your privacy-choice record, or an inquiry you choose to send. Fonts and illustrative images are served with the site. There are no embedded social feeds, maps or booking widgets.

Tracking signals

We do not use advertising or analytics trackers, sell personal information, or share it for cross-context behavioral advertising. When your browser sends Global Privacy Control, the choices panel identifies that signal. There is no advertising or analytics collection on this site to enable, and GPC does not prevent essential delivery, your chosen name-memory feature or an inquiry you send. The site also does not use cross-site behavioral tracking when Do Not Track is enabled. Hosting, form and email providers handle their essential processing as described in their policies.

Retention and your requests

Demonstration selections and inquiry drafts stay in page memory, apart from a question you explicitly transfer as described above. When you open a full example from the concept collection, the link can include your non-personal sample choices, such as a ring finish, stay dates, music track, classes, dishes or salon service. Those choices appear again when that link is opened or reloaded, and may remain in browser history or technical request logs. Preview names and inquiry details are not included in these links. Other unsaved selections reset when you leave or reload the page. Downloading a demo summary or room drawing creates a file on your device at your request; it is not sent to the studio. The shopping and restaurant concepts do not collect payment or delivery information and do not submit orders or event requests. The preview name uses the limited session storage described above. Inquiries received by email may remain in the studio inbox while we handle your inquiry, any resulting work and related business records, subject to legal and operational needs. Contact us to request access, correction or deletion of information you have sent. We may need to verify your identity and retain records where required by law. Available rights depend on the laws that apply to the information and request.

Children and external services

This is a business website, not a service directed to children under 13. External links open separate services with their own practices. The fictional examples do not create accounts, take payments, send project requests or book appointments.

Changes to this policy

We will post updates here with a revised date. We update the relevant notices and controls when data handling changes, including when features, providers or optional tracking change.