Privacy Policy

casestudycreative.ca · Effective November 1, 2026

This policy describes how Case Study Creative ("we," "us," "our"), Kevin Luttman's post production consulting business in Toronto, collects and uses information on this website, casestudycreative.ca, and through the Google sign-in we publish for admin access to our sites.

The Short Version

We collect what you send us through a contact form, and traffic statistics through Google Analytics. We don't sell or share your information, there are no accounts on this site, and there is no advertising.

Contact Forms

The contact form asks for your name, email address, and message. The app support form also asks for a topic and, if you choose to give them, your app and macOS versions. Both forms are delivered by Web3Forms, which emails your submission to [email protected]. We use it only to reply to you, and keep it in that inbox for as long as it's useful for our conversation.

Analytics

The site uses Google Analytics 4 to count page views and see how visitors find it: pages visited, time on page, referring site, device and browser type, and approximate region. Google Analytics sets cookies in your browser to tell visits apart. We use these reports only to see which pages are useful, and they are kept for Google Analytics' default retention period.

Cookies

On your first visit, a banner asks which cookies you'd like to allow. Your choice is saved in your browser's local storage and is never sent to us. You can change it any time with "Cookie preferences" in the footer.

Right now Google Analytics loads on every page whatever you choose in the banner. Until it follows your choice, you can block it with your browser's privacy settings or a content blocker. Apart from Google Analytics, the site sets no cookies. Fonts and images are served from this site, and no videos or social media widgets are embedded.

Google Sign-In for Admins

Case Study Creative publishes a Google sign-in app, also called "Case Study Creative." Its only job is to let approved admins sign in to the admin areas of sites we build and run, through Cloudflare Access. If you're not one of those admins, you'll never see it.

  • It asks Google only for basic sign-in information: your name, email address, and profile picture (the openid, email, and profile scopes). It never asks for access to your Gmail, Drive, Calendar, contacts, or any other Google data.
  • Cloudflare Access uses your email address to check that you're an approved admin, then gives your browser a sign-in session cookie for that site. Anyone who isn't approved is turned away.
  • Cloudflare Access keeps its own sign-in log (for example the email address, time, and IP address of each sign-in) under Cloudflare's privacy policy. We store nothing else from your Google account, and we never sell or share it.
  • You can remove the app's access at any time from your Google Account connections.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Hosting

The site is hosted on Cloudflare. Like any web host, Cloudflare processes your IP address and basic request details to deliver pages and protect the site from abuse.

Third-Party Services

Our Apps

Our apps have their own privacy policies: File Transfer for Backblaze B2 and Parallel Media Encoder.

Your Rights

You can ask to see or delete any personal information we hold about you, and change your cookie choice at any time. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Email [email protected] with any request.

Children's Privacy

This site is not directed at children under 13, and we don't knowingly collect their personal information.

Changes to This Policy

If what we collect or how we use it changes, we'll update this page and its effective date.

Contact

Questions about this policy? Email [email protected] or use the contact form.