Sable Studios · Privacy Policy

Privacy Policy

Last updated: 21 July 2026

This policy explains what personal data sablestudios.xyz (the "Site") collects, why, and what rights you have over it. It's written to comply with the UK GDPR, the Data Protection Act 2018, and the EU GDPR where it applies to visitors from the EU.

1. Who is responsible for your data

The Site is run by Nick, trading as Sable Studios, an individual (not a registered company), based in the UK. For the purposes of data protection law, Nick / Sable Studios is the "data controller" of any personal data collected through the Site.

Contact: [email protected]

2. The short version

Sable Studios does not run ads, does not sell or share your data, does not use tracking or advertising cookies, and does not build profiles of visitors. The only personal data collected is what you choose to submit through the commission enquiry form, plus basic, anonymised traffic and performance analytics provided by the hosting platform (Vercel). That's it.

3. What data is collected

a) Commission enquiry form

If you fill in the "Request a commission" form, the following is collected:

  • your name;
  • your email address;
  • your Discord username (optional);
  • your budget (optional);
  • if you're enquiring about a full avatar build, the avatar base you have in mind and a link to it on Jinxxy (both optional);
  • details of the commission you're enquiring about.

This data is stored in a database (hosted by Neon, on Vercel's infrastructure) so enquiries aren't lost, and a copy is emailed — via Resend, a transactional email service — to Sable Studios' inbox. A short confirmation email is also sent back to you, from the same service, to confirm your enquiry was received. It's used solely to respond to your enquiry and, if a commission goes ahead, to manage that commission (which is then also governed by the Commission Terms).

b) Website analytics

The Site uses Vercel Web Analytics and Vercel Speed Insights, provided by Vercel Inc., the Site's hosting provider. These tools are designed to be privacy-friendly:

  • they do not use cookies or any persistent identifiers;
  • they do not track you across other websites;
  • they collect aggregated, anonymised information such as page views, referring pages, approximate country/region, device/browser type, and page load performance.

This data can't reasonably be used to identify you personally, and it's used only to understand overall traffic and site performance.

c) What Sable Studios does not collect

The Site does not use advertising or tracking cookies, does not run third-party ad networks, does not require account creation, and does not process payments directly — commission payments are handled off-site via Revolut Pro or PayPal, which have their own privacy policies covering that data.

4. Why this data is processed (legal basis)

Under UK/EU GDPR, personal data must be processed on a valid legal basis. Sable Studios relies on:

  • Contract / steps prior to a contract (Art. 6(1)(b)) — for commission enquiry data, to respond to you and, if you go ahead, to perform the commission.
  • Legitimate interests (Art. 6(1)(f)) — for basic, anonymised site analytics, to understand and improve the Site. Because this data is aggregated and anonymised, it has minimal privacy impact on you.

Sable Studios does not rely on consent-based marketing or profiling, so there's no marketing consent to withdraw.

5. Who your data is shared with

Personal data submitted through the commission form is not shared with third parties, except:

  • Vercel Inc., which hosts the Site and provides the analytics described above (as a processor, and in the case of analytics, acting as it relates to aggregated data);
  • Neon Inc., which hosts the database that stores commission enquiries (as a processor);
  • Resend, which delivers the notification and confirmation emails on Sable Studios' behalf (as a processor);
  • your email provider, incidentally, as part of routing email to and from you;
  • where required by law, or to protect Sable Studios' legal rights (for example, in relation to fraud or abuse).

Sable Studios does not sell personal data, and does not share it with advertisers or data brokers.

6. International data transfers

Vercel Inc., Neon Inc., and Resend are all based in the United States. Where your data is processed by these providers as part of hosting, database storage, analytics, or email delivery, this may involve a transfer outside the UK/EEA. Each maintains its own compliance mechanisms for international transfers (such as Standard Contractual Clauses); see Vercel's privacy policy, Neon's privacy policy, and Resend's privacy policy for details.

7. How long data is kept

Commission enquiry records — held in the database and by email — are kept for as long as reasonably needed to handle your enquiry or commission, and for a reasonable period afterwards for record-keeping (for example, in case of a dispute). You can ask for your enquiry data to be deleted at any time — see Section 9.

Aggregated analytics data is retained according to Vercel's standard analytics retention settings and isn't tied to your identity.

8. Cookies

The Site does not set tracking or advertising cookies. Vercel Web Analytics and Speed Insights are cookieless by design. If this ever changes, this policy will be updated accordingly.

9. Your rights

Under UK/EU GDPR, you have the right to:

  • access the personal data Sable Studios holds about you;
  • rectify inaccurate data;
  • erase your data ("right to be forgotten");
  • restrict or object to certain processing;
  • data portability, where technically applicable;
  • lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office (ICO), ico.org.uk.

To exercise any of these rights, email [email protected]. As this is a one-person operation, requests will be handled personally and promptly, but please allow a reasonable amount of time for a response.

10. Children's privacy

The Site is not directed at children under 16, and personal data is not knowingly collected from them. Adult (18+) content offered as part of paid commissions is request-only, age-verified, and never displayed on the public Site — see the Commission Terms for details.

11. Security

Reasonable technical and organisational measures are used to protect any personal data submitted (for example, relying on Vercel's infrastructure security and standard email account security). No method of transmission or storage is 100% secure, but no unnecessary personal data is collected or retained beyond what's described above.

12. Changes to this policy

This policy may be updated as the Site or studio practices change. The "Last updated" date above reflects the current version. Significant changes will be reflected here.

13. Contact

Questions, requests, or concerns about this Privacy Policy or your data can be sent to [email protected].