Privacy Policy

Who we are

This site is operated by Ivan Bilousov, a private individual, not a registered company. For anything in this policy, including requests about your data, write to hello@verdictstudio.app.

Under the UK and EU General Data Protection Regulation, we are the data controller for the information described below.

What we collect

From you directly, only what you type into our forms. The project form on the home page asks for your name, your email address, what you need (a new app, publishing an app that's ready, fixing a rejection or something else), a description of your app, and an optional deadline. If you choose to, also your preferred messenger and your username or phone number there — used only to contact you about your request.

The short form on our rejection pages asks for less: your email address, the rejection message, optionally your app's name or App Store link, and how many apps were rejected. If you choose to, also your preferred messenger and your username or phone number there. It also sends the address of the page you used it on. It is handled exactly like the project form.

With a request from either form, we also receive the site you came from (its domain only, such as google.com), any campaign tags in the link, and the first page you opened on our site; your browser keeps these in session storage for that tab only, not in a cookie.

We do not ask for and will never accept passwords, two-factor codes, API keys, signing certificates, or customer data. If you send any of those by mistake, tell us and we will delete the message.

We do not set cookies. We do not run advertising or social tracking scripts. To deliver the page, our server necessarily receives standard request data, including your IP address. It keeps no access log; technical error logs may contain the IP address of a request that failed, and they are overwritten automatically as they fill up. We do not build profiles from any of it.

We count visits with Cloudflare Web Analytics, which sets no cookies and builds no profiles — see “Who sees it” below.

Why we collect it, and on what basis

• To reply to your request. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries.
• To do the work, if you hire us. Legal basis: performance of a contract.
• To keep the form usable. The anti-spam checks look at a hidden field and a timestamp. Legal basis: legitimate interest in preventing abuse.

We do not use your submission to train models, and we do not sell or rent it to anyone.

Who sees it

Two companies are involved in handling your submission:

• Hetzner Online GmbH — hosting. The site and the form run on a server we rent from Hetzner in Germany, inside the EU. The server passes your submission on and does not store it.
• Telegram — recipient. When you send the form, its contents are delivered to our private Telegram chat through the Telegram Bot API. Telegram is run by companies based outside the EU, so sending the form transfers your submission outside the EU. From then on Telegram also handles it under its own privacy policy.

Spacemail — our email provider, for anyone who writes to hello@verdictstudio.app. Your email and our replies are stored in our mailbox at Spacemail, a service of Spaceship, Inc., a company based in the United States. So emailing us transfers your message outside the EU. Spaceship also handles it under its own privacy policy.

Cloudflare — visit counting, for everyone who opens the site. Each page loads a small script from Cloudflare Web Analytics that counts page views. It sets no cookies, stores nothing on your device and does not build a profile of you. For each page view it reports the page address (without any query string), the site you came from, your browser, operating system and device type, and how fast the page loaded. Like any web request, it reaches Cloudflare with your IP address, from which our statistics show only your country. Cloudflare, Inc. is based in the United States, so this is a transfer of data outside the EU. Cloudflare also handles it under its own privacy policy.

No one else receives your data. We disclose it otherwise only if the law requires it.

How long we keep it

The website itself stores nothing. There is no database and no log of submission contents. What remains is the notification message in our Telegram chat — and, if you email us, the correspondence in our mailbox.

• If we do not work together: we delete the correspondence within 12 months.
• If we do work together: we keep what the engagement requires, and invoices for as long as tax law requires.
• Code and project files: local working copies are deleted after handover, and we confirm that in writing.

Your rights

If you are in the EU, the UK, or a place with comparable law, you can ask us to: give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. Where we rely on consent, you can withdraw it at any time.

Write to hello@verdictstudio.app. We reply within 30 days. You do not need to give a reason, and asking costs you nothing.

You also have the right to complain to a supervisory authority — in the EU, the data protection authority where you live; in the UK, the Information Commissioner's Office.

Children

This is a business service. It is not directed at children, and we do not knowingly collect data from anyone under 16.

Security

The site is served over HTTPS. Access credentials for client systems are never requested. Where we hold access to a client's repository or App Store Connect account, it is scoped to the case and removed at the end of it.

No transmission over the internet is perfectly secure. Please do not send secrets through this form.

Changes to this policy

If this policy changes in a way that affects you, we will update the date at the top of this page. Material changes will be described here rather than made quietly.