Privacy Policy — Website

1. What this policy covers

This policy covers the Site and any messages you send us about it.

It does not cover:

• The Fuji Cookbook app. The app has no analytics of its own, and how it handles information is described in the App privacy policy.
• Other websites. Websites the Site links to handle information under their own privacy policies.

2. The short version

• We use Google Analytics, and nothing else, to see how the Site is used. Outside the United States it stays off until you choose Accept. In the United States it is on by default, you can opt out at any time, and a Global Privacy Control signal from your browser turns it off (Section 7).
• No advertising. The Site uses no advertising cookies, our Google Analytics is not connected to Google Ads or any other advertising service, and we do not sell your personal information or share it for targeted advertising.
• We don’t try to identify you. Analytics reports describe visitors as a group. The Site has no accounts or forms; the only information we receive from you directly is what you send us by email.

3. Information we collect

• Messages you send us. If you email us, we receive your email address, your message, and anything you attach. Our mailbox is operated for us by a third-party email provider.
• Analytics information, only while analytics is allowed in your browser (Section 7). Google Analytics then collects information about your device and how you use the Site:
  • Pages you view, how long you stay, how far you scroll, and links you click to other sites
  • The website or search engine that referred you
  • Device type, operating system, browser, screen size, and language
  • Approximate location (country, region, and city), estimated from your IP address
  • A randomly generated identifier stored in a cookie, used to recognize repeat visits
  • The date and time of your visit
• Technical request information. As with any website, the servers your browser contacts to load a page receive standard information such as your IP address, browser type, the page requested, and the time. For this Site, those are the web host that serves its pages; Google, which serves Google Tag Manager; and, on the home page, Apple, which serves the App Store badge (Section 5).

We do not use Google Analytics to collect your name, email address, or other information that directly identifies you.

4. Google Analytics

We use Google Analytics 4, a web analytics service provided by Google LLC (“Google”), only to measure and improve the Site. It shows us, in aggregate, which pages are popular, how visitors find the Site, and where it isn’t working well.

It loads only when analytics is allowed. Until then, the Site does not load Google Analytics at all, so it sends Google no analytics data and sets no analytics cookies. We don’t use Google’s “advanced” consent mode, which sends cookieless measurements before you choose.

We have set up Google Analytics as follows:

• No advertising features. Our Google Analytics account is not linked to Google Ads or any other advertising product, and we have not turned on Google signals, remarketing, or ad personalization.
• No stored IP addresses. Google Analytics 4 uses your IP address only to estimate your general location; it does not log or store the IP address.
• Aggregate reporting. We look at reports about visitors as a group and do not try to identify individual visitors.

Google processes this information for us under its terms and data processing terms. For more on Google’s practices, see How Google uses information from sites or apps that use its services (opens in a new tab) and the Google Privacy Policy (opens in a new tab).

5. Other services the Site uses

• Google Tag Manager. Each page loads Google Tag Manager from Google’s servers. It shows the cookie banner, applies your choice, and loads Google Analytics only when analytics is allowed. Loading it gives Google the technical request information in Section 3. Tag Manager does not set cookies of its own.
• The App Store badge. The “Download on the App Store” badge on the home page is Apple’s own artwork, loaded from Apple’s servers, so Apple receives the technical request information when that page loads. See Apple’s privacy policy (opens in a new tab).
• Everything else is served from the Site itself, including its fonts and images, so loading them involves no one else.

6. Cookies and browser storage

The Site sets one cookie of its own, to remember your analytics choice. Google Analytics sets two more, only while analytics is allowed. All three are first-party cookies, stored under the Site’s address. We do not use advertising, social media, or other third-party tracking cookies.

If you turn analytics off, the Site deletes the Google Analytics cookies from your browser. Your browser may also delete cookies sooner; some browsers shorten cookie lifetimes if you don’t return to the Site.

Browser storage. If you switch the Site to its dark theme, your browser’s local storage keeps that choice (as theme) so the next page opens dark. It never leaves your device.

7. Your analytics choice

Whether analytics starts on or off depends on where you are, which the Site estimates from your device’s time zone setting. The time zone is read in your browser and is not sent to us for this.

• Outside the United States, analytics is off until you choose Accept in the banner. Until you choose, the Site does not load Google Analytics.
• In the United States, including U.S. territories, analytics is on by default. The banner tells you so, and you can choose Opt out.
• Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal and you are in the United States, we treat it as an opt-out: analytics stays off and the banner does not appear. If you made a choice in our banner before your browser started sending the signal, we keep that choice until you change it. Outside the United States, analytics is already off until you accept.
• Changing your mind. Use Cookie settings at the bottom of any page to see your current setting and change it. Your choice is stored in the geo_consent cookie, so it applies to this browser only.
• Browser controls. Most browsers let you block or delete cookies. The Site still works if you do.
• Google Analytics opt-out. Google offers a browser add-on (opens in a new tab) that stops Google Analytics from collecting data on any website you visit.
• Do Not Track. There is no common industry standard for Do Not Track browser signals, so the Site does not respond to them. It does respond to Global Privacy Control, as described above.

8. How we use information

We use the information described above to:

• Respond to messages you send us
• Understand how the Site is used and improve its content, design, and performance
• Keep the Site secure and fix technical problems
• Comply with the law and protect our legal rights

We do not use your information for targeted advertising, and we do not make automated decisions about you that have legal or similarly significant effects.

Legal bases (EEA, UK, and Switzerland). Where the GDPR, UK GDPR, or Swiss data protection law applies, Grove House Studio is the controller of the information described in this policy, and we rely on:

• Consent for Google Analytics. We ask before loading it or setting its cookies, and you can withdraw consent at any time with Cookie settings.
• Legitimate interests in operating, securing, and improving the Site, including serving its pages through the services in Section 5 and remembering your cookie choice, and in replying to your messages.
• Legal obligation where the law requires us to keep or disclose information.

9. How we share information

We do not sell your personal information, and we do not share it for targeted (cross-context behavioral) advertising. We share information only:

• With service providers that help us run the Site: Google, for analytics and Tag Manager, and our email provider, for messages you send us. They may use it only to provide their services to us, under their terms with us.
• For legal reasons, when required by law or legal process, or to protect the rights, property, or safety of Grove House Studio, our visitors, or others.
• In a business transfer, such as a merger, acquisition, or sale of assets, in which case this policy will continue to apply to the information transferred.
• With your consent or at your direction.

10. How long we keep information

• Google Analytics data: user-level and event-level data is kept for 14 months, after which Google deletes it automatically. Summary reports that don’t identify individuals may be kept longer.
• Your analytics choice: kept in your browser for one year, or until you delete the cookie.
• Messages you send us: kept as long as needed to respond and for our records, and no longer than three years from receipt, unless the law requires us to keep them longer. Residual copies may remain for a time in our email provider’s routine backups.

11. Your privacy rights

Depending on where you live, you may have the right to:

• Know about and access the personal information we hold about you
• Correct inaccurate information
• Delete your information
• Receive a copy in a portable format
• Opt out of the sale of personal information, targeted advertising, or profiling (we do none of these)
• Object to or restrict our processing, and withdraw consent
• Not be treated differently for exercising these rights

How to make a request. Email [email protected] with the subject line “Privacy Request.” We may need to verify your identity first, and you may use an authorized agent where the law allows. We will respond within the time the law requires. If we decline your request, we will explain why, and you may appeal by replying to our decision.

Google Analytics data is not linked to your name or email address, so we may not be able to find analytics records that relate to you. The tools in Section 7 are the most effective way to control analytics data.

If you are in the EEA, the UK, or Switzerland, you may also complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

12. International transfers

Grove House Studio is in the United States. Google may process information on servers in the United States and other countries. When personal data is transferred from the EEA, the UK, or Switzerland, we rely on safeguards recognized by law, such as the Standard Contractual Clauses in Google’s data processing terms.

13. Children

The Site is not directed to children under 13 (or under 16 in the EEA and the UK), and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we will delete it.

14. Security

We use reasonable safeguards to protect information, including HTTPS encryption on the Site and limited access to our Google Analytics and Google Tag Manager accounts. No website or storage system is completely secure, so we cannot guarantee absolute security.

15. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and change its effective date and version. If we make material changes, such as adding advertising tools, we will also post a notice on the Site before the changes take effect, and where a change requires your consent, we will ask for it first.

16. Contact

Back to contents