Yellow Duck StudioBack to the studio
Updated September 10, 2026

Privacy &
cookies.

This site is here to show you our work. With your permission, we use Cloudflare Web Analytics to understand visits and improve performance. No advertising pixels. No session replay. Here is what happens to your information.

Download policy PDF
01

Who we are

Yellow Duck Studio is an independent remote design and development studio. We are responsible for the personal information we handle through yellowduck.studio and inquiries sent to us. This policy covers our public portfolio website and those inquiries; a project agreement may set out additional terms for client work.

For privacy questions or requests, email hello@yellowduck.studio. We work remotely and do not publish a physical office address on this website.

02

What information is involved

When you visit, our hosting and delivery providers receive technical information needed to serve and protect the site. This can include your IP address, requested URL, date and time, browser and device information, referring page, and security or error signals.

When you email us, we receive your email address, the name you provide, your message, and any attachments or project details you choose to send. Our contact links open your email app; there is no inquiry form that silently submits information in the background.

If you allow analytics, Cloudflare receives page-view and performance measurements, such as the page visited, referring site, load times and Core Web Vitals, browser, operating system, device type, and country. Network requests also expose connection information to Cloudflare. These reports help us understand visits and how the site performs.

Cloudflare Web Analytics does not use cookies or local storage to identify visitors, fingerprint devices, or track people across websites. The artwork responds to your pointer in your browser; we do not record sessions or send pointer movements to analytics.

03

Cookies and browser storage

Essential functionality delivers and protects the site. Cloudflare Web Analytics is optional and is off until you choose Allow analytics or switch it on and save in Cookie settings. Choosing Essential only, closing the popup, or continuing to browse does not enable analytics. We do not use advertising pixels or targeted advertising cookies.

We store your selection in a local-storage record named yds-privacy-choice. It contains the policy version, whether analytics is allowed, and the saved and expiry times. It has no unique visitor identifier and is not sent to our server. The choice lasts 180 days, after which we ask again. A material change to these choices may also prompt a new decision. If browser storage is blocked, your choice lasts only for the current page visit.

Cloudflare may set strictly necessary security cookies when a protection or challenge is triggered. These help distinguish legitimate visitors from harmful traffic. Their names and lifetimes depend on the security feature used; they are not advertising preferences controlled by our popup.

The embedded animation library may briefly write and immediately remove a local-storage capability test. This checks whether browser storage is available and does not create a persistent visitor profile.

Open Cookie settings in the footer at any time to change your choice. Turning analytics off reloads the page to stop the loaded analytics script; it does not undo reports already sent. You can also block or clear browser storage, although blocking essential security cookies may affect access.

Cloudflare's security cookie reference

How Cloudflare Web Analytics works

04

Why we use information

We use technical information to deliver the website, investigate errors, prevent abuse, and keep the service secure. We use inquiry information to reply, discuss a potential project, prepare a proposal, and manage our business relationship. With your permission, we use analytics reports to understand visits and improve the portfolio and its performance.

Where data protection law requires a legal basis, essential delivery, security, and business inquiries rely on our legitimate interests, steps at your request before a contract or performance of a contract, or a legal obligation where one applies. Optional browser analytics relies on your consent. Saving a privacy choice does not subscribe you to marketing.

05

Providers and external links

Cloudflare Pages hosts and delivers this website. Cloudflare processes connection and request information for delivery and security and provides basic server-side traffic statistics. These essential operations are separate from the optional browser analytics controlled by our popup. When you allow browser analytics, Cloudflare also processes the measurements described above. Some portfolio images load from assets.codepen.io, which receives technical request information, including your IP address. Fonts and animation scripts are served with the site.

Our email provider processes messages you send us. Providers receive information as needed to deliver their services. We may also disclose information when required by law or to protect legal rights and the security of the service. We do not sell inquiry information or share it for targeted advertising.

Providers may process information in countries other than your own. Where applicable, transfers are subject to the safeguards required by data protection law, including contractual safeguards offered by our providers. Contact us for information about safeguards relevant to your request.

Links to another website take you to a service with its own privacy practices. Their policies apply once you visit them.

Cloudflare privacy policy

CodePen privacy policy

06

Retention and security

Your browser preference expires after 180 days. Cloudflare makes Web Analytics reports available for the previous six months; its documentation describes seven days of unsampled beacon data followed by aggregation and sampling. We keep inquiry correspondence as needed to address the inquiry, manage resulting work, and meet legal, accounting, or dispute-related requirements. Hosting and security data are subject to our providers' retention practices.

We use reasonable technical and organizational measures to protect information, including HTTPS delivery and access controls for the services we use. No internet service can guarantee absolute security. Please do not send sensitive personal information that is unnecessary for your inquiry.

Cloudflare analytics retention and reporting

07

Your choices and rights

Depending on where you live and the law that applies, you may have rights to access, correct, delete, or receive a copy of your personal information, restrict or object to certain processing, and withdraw consent for activities that rely on it. Withdrawal does not affect processing that was lawful before withdrawal. Some rights have legal exceptions.

Send requests to hello@yellowduck.studio. Include enough context to identify the information involved; we may need to verify your identity before disclosing or changing personal information. We will handle requests within the time required by applicable law. You may also complain to your local data protection authority.

The portfolio is intended for people exploring professional creative services and is not directed at children. If you believe a child has sent us personal information, contact us so we can address it.

08

Changes to this policy

We will update this page when our website or information practices change. The date at the top identifies the current version. A downloadable copy is available on this page and in the cookie settings.

Your browser. Your choice.

Cookies & storage.

Essential features keep the site working. Optional analytics helps us understand visits and performance. You decide.

Essential Always active
Site delivery, security, and remembering this notice for 180 days. The notice preference stays in your browser.
Cloudflare measures page views, traffic sources, device types, and loading performance without analytics cookies or session replay. Off until you allow it.
Advertising Not used
No advertising pixels or targeted advertising cookies.

Turning analytics off reloads this page to stop it.