Alchema Interactive
Privacy
Last updated 24 August 2026
This site is run by Chris Yates, trading as Alchema Interactive, in Paris, Texas. This page explains what happens to your information when you browse the site, send an enquiry, call us, or use the client portal. It describes what actually happens rather than what a template would say.
The short version. Reading the site leaves nothing behind. Anything you send — an enquiry, a phone call, a file, a message — is read by Chris and used to do the work you asked about. It is never sold, rented, or shared for anyone else's marketing.
If you have an account, Chris can see everything in it: your project details, every file you upload, and every message you write. That is what running the studio requires. The one thing nobody can see is your password.
If you only read the site
There are no cookies, no analytics, no tracking pixels, no advertising networks, and no third-party scripts that follow you. Nothing is written to your browser and no record of you is created here. You can read every public page of this site without giving us anything at all.
If you use the project wizard
We receive:
- your name, email address and, if you give it, your company;
- the answers you chose, and any description you wrote;
- the address of your existing website, if you gave one;
- your deadline, if you gave one;
- technical details recorded automatically with the submission by our form provider: your IP address, your browser's user-agent string, and the page you submitted from.
We use it to read your enquiry and reply to it. Nothing else.
If you call us
The phone number on this site is answered by an automated assistant, not by a person. It says so when it answers.
Calls are recorded and transcribed. That means:
- a recording and a written transcript of the call are created and kept;
- the assistant collects what you tell it — typically your name, company, what you want built, your phone number and email — and emails that summary to Chris;
- your telephone number is visible to us as part of receiving the call.
If you would rather not be recorded, do not use the phone line — email and the wizard reach the same person and neither is recorded. If you have already called and want the recording and transcript deleted, ask and we will delete them.
If you create an account
The client portal is where a project actually gets built. Creating an account is optional and nothing on the public site requires one.
What we hold
- your name, email address and company;
- your project: its title, description, deadline and current stage;
- every file you upload — logos, photographs, PDFs, brand guides, fonts;
- any links you paste to folders held elsewhere, such as Drive or Dropbox. We store the link, not the contents of that folder;
- every message in the project's thread, from either side.
What is stored in your browser
When you sign in, your browser keeps a session token so you are not signed out every time you close the tab. It is not an advertising cookie and it is not used to track you anywhere. Signing out removes it, and so does clearing your browser's site data.
Your password
Passwords are stored only as a one-way cryptographic hash by our authentication provider. There is no screen, no export and no database query — for us or for anyone else — that reveals a password. That is why a forgotten password is reset by email rather than looked up.
Messages cannot be edited or deleted
A message posted in a project thread stays there, for both sides. Neither you nor we can quietly rewrite it. That is deliberate: the thread is the record of what was agreed. Chris can archive a message out of his own inbox view, which changes nothing about what you see.
What Chris can see
Everything above, for every account. There is no part of your project, your files or your messages that is hidden from him — running the studio means reading what you send. He cannot see your password, and he cannot see anything belonging to a different client from within your project.
Clients cannot see each other. The database refuses a request for another account's data rather than relying on the website to hide it.
Who else is involved
- Netlify hosts this site and receives project wizard submissions, storing them and emailing them to us. United States.
- Supabase provides the accounts, the database and the file storage behind the client portal. Your account, project, files and messages live there, in their US West (Oregon) region.
- Resend delivers our email — sign-in links, address confirmations, and the notifications telling you a message has arrived. United States.
- Our telephone assistant provider runs the phone line, and creates and stores the call recordings and transcripts described above.
- Google Fonts serves the typefaces this site uses. When your browser fetches them, Google receives your IP address. No other information is sent and we receive nothing back.
That is the complete list.
How long we keep it
- Enquiries — for as long as the conversation they started is live, and afterwards as an ordinary business record.
- Call recordings and transcripts — deleted on request, and otherwise kept only as long as they are useful to the enquiry.
- Accounts, projects, files and messages — for the life of the project and for a reasonable period afterwards, so that finished work can be supported and referred back to.
Ask us to delete any of it and we will, unless we are required to keep it for tax or legal reasons — in which case we will tell you what and why.
Your choices
Email us and we will tell you what we hold about you, correct it, export it, or delete it. Depending on where you live you may have a formal right to those things; we will honour the request either way, and we will not ask you to explain why.
You can delete your own uploaded files from the portal at any time.
Security
The site is served over HTTPS. Uploaded files sit in private storage and are reachable only through short-lived links generated when you open them — there is no public address for your files. Access rules are enforced by the database itself rather than by the website, so a request for someone else's data is refused at the source.
No system is perfect. If you believe something here is wrong, please tell us and we will look at it the same day.
Children
This site is for people commissioning professional work. It is not directed at children and we do not knowingly collect their information.
Changes
If this page changes, the date at the top changes with it. We do not keep an archive of previous versions, so the current text is the whole of it.