Privacy on the AZ Studio website

Who is responsible

AZ Studio is an independent project run by Francis Pwavwe. You can reach him through the contact page on The Pwavwe Papers.

This notice covers the public pages of az-studio.web.app and the early-access list. The private studio behind the “Studio sign in” link is used only by its owner.

What we collect

If you join the early-access list

• Your email address (required).
• Your name and main creative interest, if you choose to give them.
• A record of your consent: that you ticked the box, when, and which version of this notice was shown.
• When you registered, when the form was last submitted for your address, and how many times.

To prevent abuse of the form

Your network (IP) address is used to limit repeated submissions. It is stored only as a keyed hash — not the address itself — and the hash is deleted after 48 hours.

When you visit any page

Google, which hosts the site, processes the technical details every web request carries — such as your IP address, browser type and the page requested — to deliver it. Requests to the early-access form are also recorded in Google Cloud’s service logs, which are kept for 30 days.

The public pages set no cookies and use no analytics, advertising or tracking tools. Fonts and scripts are served from this site. The audio players in the showcase stream from this site and Google Cloud Storage only when you press play.

If you open the studio sign-in page, Google’s sign-in and reCAPTCHA services load there to protect the private studio.

Why we use it

Only to run the early-access list: to know who would like to try AZ Studio and to email you about early access, such as an invitation. We rely on your consent, which you can withdraw at any time. We don’t sell your details, share them with advertisers, or add you to any other mailing list.

Who processes it

The website and the list run on Google Cloud (Firebase Hosting, Cloud Functions and Cloud Firestore). Registrations are stored in Google’s us-central1 region in the United States, in a database that the public cannot read; only Francis can view or export them.

No email service is connected yet. If one is used to send invitations, this notice will be updated before that happens.

How long we keep it

Registrations are kept while the early-access list is in use, and deleted when it is no longer needed or when you ask — whichever comes first. Hashed network addresses are deleted after 48 hours; service logs after 30 days.

Your choices

You can ask for a copy of what is stored about you, ask for it to be corrected, or ask for it to be deleted and to be taken off the list. Use the contact page, writing from the address you registered with so the request can be matched. Deletion removes your registration and its consent record.

If you’re unhappy with how your information is handled, please get in touch first; you may also have the right to complain to a data protection authority where you live.

Changes

If this notice changes, the version date at the top changes too. Registrations record which version was shown when you joined.