Skip to main content
Red Bead Studio

Privacy

Privacy Policy

Last updated 21 October 2026

Who we are

Red Bead Studio OÜ is the controller for this website. We are registered in the Estonian Commercial Register under registry code 17616892, and our registered address is Sepapaja tn 6, 15551 Tallinn, Estonia. For any privacy question or request, email office@redbeadstudio.com. Our company details are also on the Imprint.

What this site is

This is a static, informational website with no accounts, forms or tracking cookies: Cloudflare sets only strictly necessary security cookies, analytics runs only if you accept it, and your theme and cookie choices stay in your browser.

What we process, why, and for how long

  • Serving and securing the site. Cloudflare processes request data, including your IP address, to deliver pages and protect the site from abuse. To tell people from automated abuse, its bot protection runs a quiet check in the background on every visit and can set two strictly necessary security cookies. __cf_bm expires after 30 minutes of inactivity, and its content, apart from timing information, is encrypted. cf_clearance may be set on any page view, when that check runs or after a challenge; it remembers that the check passed. Your browser keeps it for up to a year, but Cloudflare accepts it for only about 30 minutes after the check. Because these cookies are strictly necessary for the security of the site, they need no consent (ePrivacy Directive Art. 5(3)). Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in delivering and securing the site. This data is kept in Cloudflare's short-lived operational and security logs only as long as delivering and securing the site requires.
  • Email you send us. The contact link opens your own email app; nothing is submitted through the site. Your address and message reach our mailbox, and we use them to answer you. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in answering you. We keep the conversation for as long as we need it to answer you and handle any follow-up, and longer only where the law requires it.
  • Occasional updates. If you ask to be added, we keep your address in that same mailbox until you ask us to remove it — there is no signup form or automated mailing yet. Legal basis: Art. 6(1)(a) GDPR, your consent. You can withdraw it at any time by asking us to remove you; this does not affect our use of your address before you withdrew.
  • Counting visits, if you accept. Cloudflare Web Analytics, a small script from Cloudflare, records the page you view, the site that referred you, your browser and device type, your country (derived from your IP address) and how fast the page loaded. It uses no cookies or other storage on your device and builds no profile of you. It runs only after you choose "Allow analytics" in the cookie panel. If you close the panel without choosing, analytics stays off, and your browser remembers the close for that tab only, so the panel does not keep reappearing. Your choice, either way, applies for 12 months; after that, the panel asks again. Legal basis: Art. 6(1)(a) GDPR, your consent, which also covers the script's access to your device (ePrivacy Directive Art. 5(3)). You can withdraw it at any time with the "Cookies" button at the bottom left of every page or "Cookie settings" in the footer; this does not affect the processing before you withdrew. Cloudflare keeps the full data for 7 days, then aggregates it down to about 10%, which we can see for six months.

Who processes data for us

Both providers belong to US groups (Cloudflare, Inc. and Google LLC), so personal data may be transferred to the US. Those transfers rely on the EU-US Data Privacy Framework, with the standard contractual clauses in each provider's data processing addendum as a fallback. No one else processes personal data from this site for us.

Your rights

You have the right to access the personal data we hold about you and to have it rectified or erased. You can also ask us to restrict its processing, or to give it to you in a portable form.

Right to object. You have the right to object at any time to the processing we base on our legitimate interests: serving and securing the site, including the security cookies, and answering your email. If you object, we stop unless we have compelling legitimate grounds that override your interests, rights and freedoms.

To exercise any of these rights, or to withdraw your consent to updates, email office@redbeadstudio.com. You can withdraw your consent to analytics at any time with the "Cookies" button on every page or "Cookie settings" in the footer. You can also complain to the Estonian data protection authority, the Andmekaitse Inspektsioon (aki.ee), or to the authority where you live or work.