How we handle your data.

This page describes what our website and order system actually do with your data. It is written from the code that runs goldgrainstudio.com, not from a template. If something here is not true of a given feature, we say so.

The free tools

The tools under /tools run in your browser. Videos and images you open are read by your browser and processed on your device with canvas, MediaRecorder, Web Audio and WebAssembly. They are never uploaded: our server has no upload endpoint for them. The only network request a tool can make is to load its own script and, for Auto Captions, the open-source speech model, which is downloaded from public CDNs (jsDelivr and Hugging Face) and cached by your browser. Your audio is not sent to either.

Hosting and transport

• The site runs on a server in Amazon Web Services, Ireland, behind Cloudflare. Traffic uses HTTPS, and the site sends an HTTP Strict Transport Security header with a one-year lifetime.
• Every response carries X-Content-Type-Options: nosniff, X-Frame-Options: SAMEORIGIN, a strict-origin-when-cross-origin referrer policy and a permissions policy that disables camera, microphone and location.
• Request bodies to our API are capped at 64 KB. Checkout, chat and page-view endpoints are rate-limited per visitor, and the checkout form has a hidden honeypot field for bots.

What we store when you order or enquire

• Orders: your email, the product link you paste, the plan and style you pick, your notes, the amount, the payment status and your IP address. This sits in a database file on our server.
• Proposal requests: the details you type into the form, plus your IP address.
• Studio chat: your question, the answer, and your IP address. Your messages are sent to an AI provider (Anthropic, with Google as a fallback) to generate the answer.
• Page views: path, referrer, country and a one-way hash of your IP address and browser that changes daily. No cookie is set for this and the raw IP address is not stored with it.

Retention periods are in the privacy policy.

Payments

Payments are taken by Razorpay or PayPal on their own pages. Card numbers never reach our servers. Payment confirmations are verified by cryptographic signature (HMAC for Razorpay, PayPal's own verification endpoint) before an order is marked paid.

Delivery links

Finished files are delivered through links containing a long random token. A link works only for jobs that have reached review, approval or delivery, expires 60 days after the job was last updated, is served with no-store caching and is marked noindex. Brief-approval links are also token-based. Anyone with a link can open it, so do not forward it publicly.

What we do not claim

• We do not hold SOC 2, ISO 27001 or similar certifications.
• We do not claim encryption of stored order data at rest beyond what our hosting provider applies to its disks.
• We use the files you share only to make your order. We do not use your product link, brief or deliverables to train models.

Report a problem

If you find a security issue, email [email protected] with details. We read every report and reply by email. Please do not test against other customers' data.