Privacy Notice

Last updated: 15 October 2026

1. Who is responsible?

Studio Quest is an independent early-stage project run by Francisco Canteiro, based in Portugal, acting as the data controller for the research described here.

Privacy and general enquiries: studioquest.team@gmail.com

2. What is this website for?

We are testing an idea for a four-week music-practice toolkit for instrument teachers. This website is a concept preview, not a store, an order form or a tool for collecting student records. Please do not submit information about children or students.

3. What information is collected?

• Survey answers: three optional multiple-choice selections about your teaching role, your main practice-related challenge and the price you might consider for a completed toolkit. We do not request names, email addresses or free-text answers in the survey.
• Basic site events: a page load, an interaction with the sample game and the start of the survey. These are stored as event types and times, without an account ID or unique visitor identifier. Counts do not establish the number of distinct visitors.
• Anti-spam information: when you submit a survey, the server briefly processes a network address to generate an hourly rotating, secret-keyed pseudonymous fingerprint for rate limiting. The original address is not written to our survey database.
• Hosting information: Cloudflare may process network addresses and technical request/security logs needed to deliver and protect this website under its applicable terms and policies.

The interactive student's name, instrument, achievements and XP are fictional sample data. Actions in the game preview are not saved as an individual student profile.

4. Why is this processed?

We use survey answers to assess whether teachers find the proposed product useful, simple event counts to understand which parts of the preview are used, and temporary anti-spam records to reduce misuse. Our proposed legal basis under GDPR Article 6(1)(f) is legitimate interests in limited product research and basic service security, subject to the balancing of those interests against visitors' rights. Completing the survey is optional.

5. How long is it kept?

• Survey answers: eligible for deletion after 90 days.
• Recorded site events: eligible for deletion after 30 days.
• Anti-spam fingerprints: eligible for deletion after approximately 48 hours.

Expired records are removed on subsequent site activity and through manual maintenance; they may remain longer if no subsequent activity or maintenance occurs. Hosting provider security logs may have separate retention periods governed by its policies.

6. Who provides the infrastructure?

The site is hosted using Cloudflare, with survey results and counters held in a Cloudflare D1 database configured with EU jurisdiction. This does not necessarily mean all network traffic, logs or ancillary processing are restricted to the EU. We do not intentionally share survey responses with advertisers or sell the responses.

7. Cookies and marketing

Studio Quest does not currently install advertising pixels, a marketing mailing list or first-party behavioural-tracking cookies in its own code. Cloudflare may operate strictly necessary technical/security measures. No newsletter subscription is created by submitting the survey.

8. Your rights

Under applicable data-protection law, you may have rights to access, correct, delete or restrict personal data, or object to relevant processing. You can contact studioquest.team@gmail.com with privacy questions or requests. Because survey answers are collected without personal identifiers, we may not be able to reliably associate an individual response with a specific visitor.

You may also lodge a complaint with the Portuguese supervisory authority, CNPD.

9. Changes

We may update this notice as the concept evolves. The date at the top of this page will reflect any substantive changes.