Privacy Policy

This privacy policy explains what personal data anpsagency.com collects through project briefs and the newsletter, why, and how long we keep it.

This privacy policy explains what personal data we collect on anpsagency.com, why we collect it, who sees it and how long we keep it. We collect as little as we can: no advertising, and analytics only if you agree to it.

Last updated: 27 September 2026

Who is responsible for your data

The controller of your personal data is Anpsthemes LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. We trade as ANPS Agency (anpsagency.com) and also run ANPS Themes (anpsthemes.com). Our team works from Ljubljana, Slovenia.

For any question about your data, email info@anpsagency.com.

What we collect

We only collect data you send us, plus the technical data any web server needs to work.

  • Project briefs. When you send a brief through the contact form we collect your name and email address (required), and, if you give them, your company, the services you need, your budget range, your timeline, your project description, whether you want an NDA first, and up to 5 files (PDF, DOCX, PNG or JPG, up to 10 MB each).
  • Newsletter. When you subscribe we collect your email address and send you an email with a confirmation link. You are only added to the list after you click it (double opt-in). Our newsletter software also records your subscription status, when you subscribed and confirmed, and the IP address you subscribed from.
  • Newsletter activity. Our newsletter emails can record when an email is opened and which links in it are clicked, so we can see which articles are useful.
  • Website analytics, only with your consent. If you accept analytics in our cookie banner, Google Analytics records how you use the site: the pages you view, how you got here, your device, browser and approximate location (country or city). Google Analytics does not store your IP address. If you reject, nothing is sent to Google.
  • Emails you send us. If you email us or reply to our emails, we keep the conversation and anything you include.
  • Server logs. Like every website, our hosting provider keeps standard access logs: your IP address, the date and time, the page requested, your browser’s user agent and the referring page.
  • Spam and abuse checks. To stop form abuse, we count how many briefs and newsletter sign-ups come from the same connection. We only keep a scrambled (salted hash) version of your IP address for this, never the address itself, and it expires after one hour for briefs and ten minutes for sign-ups.

We do not store your IP address with a brief. Please do not send us sensitive data (such as health data) or other people’s personal data in a brief unless you are allowed to share it.

How we use it and our legal basis

If you are in the European Union, the European Economic Area or the United Kingdom, the GDPR and UK GDPR require us to have a legal basis for each use.

  • Answering your brief and preparing a proposal or contract: steps you asked us to take before entering into a contract, and performing that contract if we work together.
  • Sending the newsletter and measuring opens and clicks: your consent. You can withdraw it at any time by unsubscribing.
  • Website analytics (Google Analytics): your consent, given in the cookie banner. You can withdraw it at any time under “Cookie settings” at the bottom of every page.
  • Keeping the site secure, blocking spam and abuse, and keeping server logs: our legitimate interest in running a safe, working website.
  • Keeping business records such as contracts and invoices: our legal obligations.

We do not sell your data, use it for advertising or make automated decisions about you.

How your brief is handled

Your brief is saved in our website’s admin area, which only our team can open. We also email a plain-text copy to our team inbox at info@anpsagency.com, so we can reply to you directly, and we send you a confirmation email with a reference number and the options you picked (not your project description or files). Files are not attached to any email. They are stored in a private folder on our web server that cannot be opened from the web, and only logged-in team members can download them.

How long we keep it

  • Briefs and related emails that do not lead to a project: deleted 24 months after our last contact with you.
  • Briefs and emails that lead to a project: kept for the length of the project and then as long as we need them for the contract, and for as long as tax and accounting law requires for invoices and contracts.
  • Newsletter: until you unsubscribe. We delete your subscriber record within 30 days after you unsubscribe.
  • Server logs: up to 30 days, unless we need a log longer to investigate a specific security incident.
  • Website analytics: Google Analytics keeps the data for 14 months, then deletes it.
  • Spam and abuse checks: one hour for briefs, ten minutes for newsletter sign-ups.
  • Form messages after sending without JavaScript: the confirmation or error page state is kept for up to 15 minutes.

You can ask us to delete your data sooner. See “Your rights” below.

Cookies and browser storage

We use no advertising cookies. Analytics cookies are only set if you accept them in our cookie banner, and you can change your choice at any time under “Cookie settings” at the bottom of every page. Here is everything the site can store in your browser:

  • anps-loaded (session storage): remembers that the intro animation has already played, so it only plays once. It holds the value “1”, no personal data, and your browser deletes it when you close the tab.
  • anps-consent (local storage): remembers whether you accepted or rejected analytics, so we don’t ask on every page. It is kept for 12 months, after which we ask again. If your browser sends a Global Privacy Control signal, we treat it as a “reject” and don’t ask.
  • _ga and _ga_<ID> (cookies, Google Analytics): only if you accept analytics. They tell visits from the same browser apart and expire after 2 years. Rejecting in “Cookie settings” deletes them.
  • Newsletter cookie (named “newsletter-” followed by a code): set only if you open a link in one of our newsletter emails, or confirm or manage your subscription on our site. It recognises you as a subscriber and expires after 30 days.
  • WordPress login cookies: set only for our team members when they log in to manage the site. Visitors never get them.

Third parties and outbound links

Our pages load nothing from other companies until you make a choice about analytics. Fonts, images and scripts are served from our own server. If you accept analytics, your browser loads Google Analytics from Google’s servers; otherwise it never does. There are no advertising pixels, embedded videos or social media widgets, and author pictures are not loaded from Gravatar.

The share buttons on our articles are plain links. Nothing is sent to LinkedIn or X until you click one. We also link to our profiles on LinkedIn and GitHub and to our own products at anpsthemes.com, ownthegame.app and p2flux.com. When you follow any of these links, the other site’s privacy policy applies.

Who receives your data

Only our team can see your data. We use a small number of service providers who process it on our behalf and under our instructions:

  • Google Cloud (Google LLC), our hosting provider, which runs the web server and database where briefs, files, subscribers and logs are stored;
  • Google Workspace (Google LLC), our email provider, which delivers brief notifications and newsletters and hosts our team inbox;
  • Google Analytics (Google LLC), our website analytics service, only if you accept analytics. Advertising features and Google signals are turned off, so the data is not used for ads.

We may also share data when the law requires it, or with professional advisers such as lawyers and accountants who are bound by confidentiality.

International transfers

Anpsthemes LLC is a United States company, and our team works in Slovenia, in the European Union. Your data is therefore handled in the EU and may also be processed in the United States, including in Google’s data centres. When personal data from the EU, EEA or UK is transferred to a country without an adequacy decision, we use the safeguards the law provides. Google LLC is certified under the EU-U.S. Data Privacy Framework and its UK extension, and its data processing terms include the European Commission’s Standard Contractual Clauses.

Your rights

Under the GDPR and UK GDPR you have the right to:

  • get a copy of the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict how we use it, or object to uses based on our legitimate interests;
  • receive the data you gave us in a common, machine-readable format;
  • withdraw your consent at any time, for example by unsubscribing from the newsletter or rejecting analytics under “Cookie settings”. This does not affect what we did before you withdrew it.

If you live in a US state with a consumer privacy law, such as California, you have similar rights to know what personal information we collect, to access it, to correct it and to delete it. We do not sell your personal information or share it for targeted advertising, and we will not treat you differently for using your rights.

To use any of these rights, email info@anpsagency.com. We may ask you to confirm your identity, usually by replying from the email address we have on file. We answer within one month, or within 45 days where US state law applies, and tell you if we need more time. You can unsubscribe from the newsletter at any time with the link in every newsletter email.

If you are not happy with how we handle your data, please tell us first so we can fix it. You also have the right to complain to a data protection authority, in particular in the country where you live or work. In Slovenia this is the Information Commissioner (Informacijski pooblaščenec). In the UK it is the Information Commissioner’s Office (ICO).

Security

The site is served over HTTPS. Only our team can log in to the admin area. Brief files are kept in a private folder with random names and can only be downloaded by logged-in team members. Forms are protected against spam and abuse. No system is perfectly secure, but if a breach affects your data, we will tell you and the authorities when the law requires it.

Children

Our services are for businesses. The site is not meant for children under 16, and we do not knowingly collect their data. If you believe a child has sent us personal data, email us and we will delete it.

Changes to this policy

We will update this policy when the site or the law changes, and change the “Last updated” date at the top. If a change affects how we use data you already gave us, we will tell you by email before it takes effect.

Contact

Anpsthemes LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. Privacy questions: info@anpsagency.com.