Privacy policy

What changed on 28 October 2026

Our server now also sends Meta the same visit events that the Meta Pixel sends from your browser, through the Meta Conversions API. When you send the contact form while Marketing is on, Meta also receives your email address and name in hashed form, so it can match the enquiry to a Facebook or Instagram account. Turning Marketing off, choosing Reject or sending Global Privacy Control stops both, as before.

On 27 October 2026 we added two optional tools: Google Analytics, which shows us how the site is used, and the Meta Pixel, which measures our Facebook and Instagram ads. They run unless you turn them off with Reject in the cookie banner, in the cookie settings or with Global Privacy Control. If you visit from the European Economic Area, the United Kingdom or Switzerland, they run only after you choose Accept. Nothing we collected before this date is shared with Google Analytics or Meta.

The short version

• We set no cookies of our own. Two optional tools run unless you turn them off: Google Analytics, which shows us how the site is used, and the Meta Pixel, which measures our ads. In the European Economic Area, the United Kingdom or Switzerland, they run only if you accept them.
• We collect what you send us through the contact form or by email, and use it to answer you.
• We do not sell your personal information for money. Through the Meta Pixel and our server, Meta receives information about your visit and, if you send the contact form, your email address and name in hashed form, which US state laws can treat as sharing for targeted advertising; you can opt out at any time with Reject in the cookie banner, in your privacy choices or with Global Privacy Control.
• A few service providers handle data for us: Vercel hosts the site, Hostinger hosts our email, Cloudflare checks the contact form for bots, Google runs the free site check and Google Analytics, Anthropic writes the automation and app plans you can ask for, and Meta measures our ads.
• You can ask us to show, correct or delete your information at info@codegeniestudio.com, wherever you live.

Who we are

Code Genie Studio LLC ("we", "us") is a design and engineering studio registered in Texas, United States. We design and build websites, apps and platforms, and operate RingGenieHub. We decide how the personal information described here is used, which makes us its controller. You can reach us at info@codegeniestudio.com.

RingGenieHub has its own privacy policy at ringgeniehub.com. That policy, not this one, applies when you use the product.

What we collect and how

When you contact us

The contact form asks for your name and email address, and optionally your website, the service you need and a message. When you send it, our server passes it as an ordinary email to our business mailbox, which is hosted by Hostinger. The same applies when you email us directly. We do not keep a separate database of enquiries.

To keep spam out, our server also checks how fast the form was filled in and keeps your IP address in memory for up to ten minutes, to limit how many messages one connection can send. Nothing of this is written to disk.

The spam check by Cloudflare Turnstile

When the contact form comes into view, your browser loads Cloudflare Turnstile. It looks at technical signals such as your IP address, browser and connection details to tell people from automated programs, usually without asking you to do anything. When you send the form, our server sends Cloudflare the result token and your IP address to confirm the check. Cloudflare processes these signals for us, and also on its own behalf to improve its bot detection; it does not use them for advertising. See the Cloudflare privacy policy and the Turnstile privacy addendum.

When you ask for a site review

If you ask for a full review, we email you the result of Google’s PageSpeed test for the website address you gave, running the test again on our server if needed. A copy goes to our mailbox so a person can follow up. This is a one-off reply to your request: we do not add you to a mailing list and do not send newsletters.

When you ask for an automation or app plan

The task calculator on our AI automation page and the app check on our mobile app page work in your browser and send nothing until you ask for a plan. When you do, our server sends what you entered (the task and its numbers, or the app idea and your four answers) and the message you wrote in the form to Anthropic, whose AI model writes the plan. We do not send Anthropic your name or email address. We email you the plan, with a copy to our mailbox so a person can read it and follow up. Anthropic processes the text for us under its commercial terms, which do not allow it to train its models on it, and keeps it for a limited period, longer only if it is flagged for a policy violation. See the Anthropic privacy policy. The plan is written by AI and can contain mistakes; it is advice for you to consider, not a decision about you.

When you use the free site check

The website address you type is sent by our server to Google PageSpeed Insights, which loads that public page and returns the test result. Google receives the address you test, not your IP address or any other details about you. Our server keeps the address and the result in memory for up to ten minutes, so a repeated check of the same address is answered at once, and keeps your IP address in memory for the same time to limit how many checks one connection can run. Neither is written to disk. Google’s processing is covered by the Google privacy policy.

When you browse the site

Our host, Vercel, records standard technical information for each request, such as IP address, browser type, the page requested, the referring page and the time. It is used to deliver the site, keep it secure and fix errors, and is kept for a limited period under the Vercel privacy notice. We do not use it to identify you or to build a profile of you.

Google Analytics

Unless you turn off Analytics with Reject in our cookie banner, in the cookie settings or with Global Privacy Control, your browser loads Google Analytics from Google LLC. If you visit from the European Economic Area, the United Kingdom or Switzerland, it loads only after you choose Accept. It records the pages you view, the page that sent you here, how long you stay, how far you scroll, the links you follow out of the site and the same steps listed for the Meta Pixel below, together with your browser, device, screen size, language and approximate location (country and city, which Google derives from your IP address and does not store). It uses the cookies listed in our cookie policy to recognise your browser across visits. We do not send Google Analytics your name, your email address, the website address you test or anything you type. We have turned off Google signals and ad personalization, and we do not link Google Analytics to any advertising account. Google processes this data for us to produce reports; see the Google privacy policy and how Google uses information from sites that use its services.

The Meta Pixel

Unless you turn off Marketing with Reject in our cookie banner, in the cookie settings or with Global Privacy Control, your browser loads the Meta Pixel from Meta Platforms, Inc. If you visit from the European Economic Area, the United Kingdom or Switzerland, it loads only after you choose Accept. It sends Meta the pages you view on our site and the steps you take there: opening the contact form, starting to fill it in, sending an enquiry, starting the site check and the score band it returns, the result of the app check or the automation calculator, clicking an email or phone link, how far you scroll (a quarter, half, three quarters, nearly all of a page), whether you stay longer than 30 seconds, one minute and three minutes, and which outside links you follow. Meta also receives your IP address, browser and device details and the cookies listed in our cookie policy.

The Meta Conversions API

While Marketing is on, our server sends Meta the same events directly, each with the same event ID so Meta counts it once. With each event it sends your IP address, your browser's user agent, the Meta cookie values from our domain (_fbp and _fbc, or the ad click ID in the address you arrived with) and your approximate location as our host derives it from your IP address (country, state, city and postal code). When you send the contact form, it also sends your email address and your first and last name. Location, email address and name are hashed with SHA-256 on our server before they are sent, so Meta receives a fingerprint it can compare with the accounts it already knows, not the text itself. We do not send Meta the website address you test, the task or app idea you describe, your message or anything else you type. The server sends nothing when Marketing is off, when your browser sends Global Privacy Control, or for automated visitors.

Meta uses this to measure our ads and to let us show our ads to people who visited, and, as its own policy describes, for its own purposes such as improving its ad systems; if you are logged in to Facebook or Instagram, or if your hashed email address matches an account, Meta can link the information to that account. We see aggregated reports and audiences, not who you are. See the Meta privacy policy.

Storage on your device

We set no cookies of our own. When Google Analytics or the Meta Pixel run, they set the cookies listed in our cookie policy. Your choice is stored in one local storage entry in your browser that is never sent to us. The Turnstile check runs in a frame served by Cloudflare, which may store what it strictly needs to tell people from bots, as Cloudflare describes in its Turnstile privacy addendum.

When you become a client

If we work together, we also keep the information needed to deliver and bill the project: names and contact details of the people we work with, proposals, agreements, invoices and payment records, and any access you give us to your systems. The project agreement describes how we handle your data and your customers’ data during the project.

What we do not want

Please do not send health, financial, government identification or other sensitive information through the form or by email. We do not need it to answer an enquiry, and we do not knowingly collect it through this site.

Categories of information

In the last 12 months we have collected only these categories, and only for the purposes below.

Why we use it

• to answer your enquiry, send the site review, automation plan or app plan you asked for, and prepare a proposal;
• to deliver, support and bill a project we agreed on;
• to keep the site and the contact form secure and free of spam and abuse;
• unless you opt out, to understand how visitors use the site so we can improve it;
• unless you opt out, to measure our ads on Facebook and Instagram and show them to people who visited our site;
• to meet legal, tax and accounting obligations, and to establish or defend legal claims.

We do not use personal information for automated decisions that have legal or similarly significant effects on you.

Legal bases, if you are in the EEA or the United Kingdom

Selling, sharing and targeted advertising

We do not sell personal information for money, we do not use it for profiling that has legal or similarly significant effects, and we do not disclose it to third parties for their own direct marketing.

Through the Meta Pixel and the Conversions API, information about your visit, and your hashed email address and name if you send the contact form, goes to Meta and we may use it to show our ads to you on Facebook and Instagram. California law can treat this as sharing for cross-context behavioral advertising, and Texas and other state laws as targeted advertising. You have the right to opt out of it. In the European Economic Area, the United Kingdom or Switzerland, we do it only after you opt in. To opt out, choose Reject in the cookie banner, switch Marketing off in your privacy choices, linked in the footer of every page, turn on Global Privacy Control in your browser, or email us. Opting out stops the pixel and our server events for that browser and deletes the pixel cookies on our domain; it does not undo what Meta already received, which you can manage in your Facebook or Instagram ad settings.

Who we share it with

We share personal information with service providers that process it for us, under their own privacy terms and only as far as needed for the service they provide, and, unless you opt out, with Meta as described above:

We may also disclose information when the law requires it, to protect our rights or the safety of others, or to a buyer or successor if our business is sold or reorganized, in which case this policy continues to apply to it.

Do Not Track and Global Privacy Control

If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as an opt-out of Google Analytics, the Meta Pixel and the Conversions API: the cookie banner does not appear, neither tool loads and our server sends Meta nothing. You can still turn them on yourself in the cookie settings.

How long we keep it

Your rights

Wherever you live, you can ask us to:

• confirm whether we hold personal information about you and give you a copy, in a portable format where practical;
• correct information that is inaccurate;
• delete your information, unless we must keep it, for example for tax records of a project;
• restrict or object to how we use it, where the law gives you that right.

To make a request, email info@codegeniestudio.com from the address we have for you, or tell us how we can confirm it is you. Someone you authorize can make a request for you with your written permission. We answer within 45 days; if we need more time, we tell you why within that period and answer within 45 more days. Requests are free, and we will not treat you differently for making one.

If we decline your request, you can appeal by replying to our answer with the word "appeal". We will review the decision and reply in writing within 60 days. If you are still not satisfied, you can contact the attorney general of your state; in Texas, that is the Office of the Attorney General.

If you are in the European Economic Area or the United Kingdom, we answer within one month, and you can also complain to your local data protection authority.

Security

The site is served only over HTTPS, so what you send is encrypted in transit. Our accounts are protected with strong, unique passwords and two-factor login where the provider offers it, and access to enquiries is limited to the people who answer them. No system is perfectly secure; if a breach affects your personal information, we will notify you and the authorities as the law requires.

Where information is processed

We are a United States company. We and our providers process information in the United States and in other countries where we or they operate. If you are in the EEA or the UK, your information is transferred to the United States under the safeguards our providers offer, such as the EU-U.S. Data Privacy Framework or standard contractual clauses.

Children

This site and our services are for businesses and adults. They are not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, contact us and we will delete it.

Links to other sites

Our pages link to other sites, such as RingGenieHub and the sites in our portfolio. Their own privacy policies apply when you visit them.

Changes to this policy

The effective date at the top of this page shows when the policy last changed, and the top of the page says what changed. If we want to use information we already hold in a materially different way, we will say so here at least 30 days before and, where the law requires it, ask for your consent first. A change that only affects what we collect from your next visit onwards, and that you can turn off, takes effect when we publish it here with a note at the top of the page. We email clients whose information a change affects.

Contact

Questions and requests about privacy go to info@codegeniestudio.com. A person reads every message.