Privacy policy2 November 2026

Privacy policy

What mindsurf.org collects about you, why, who handles it, how long we keep it, and what you can ask us to do.

Who we are

MindSurf Research runs this website. We test creative work, such as packs, logos, signs and ads, with real people for the companies that make it. If you have a question about this policy or about your data, email [email protected].

What this policy covers

This policy covers the website at mindsurf.org and the forms on it. Our research studies run on a separate platform, and the information shown when you join a study explains how your answers are handled.

What we collect, and why

When you visit
Our host, Cloudflare, records the technical details of each request so it can serve the page and keep the site safe: your IP address, the page you asked for, the time, and the kind of browser and device you used. We do not run analytics, advertising trackers or social media pixels, and the site sets no cookies. The typeface comes from Google Fonts, so your browser asks Google's servers for it, and Google sees your IP address when it does.
When you request a quote
The form on the quote page asks for your name, your email address, what you want to test, who should rate it, when you need it, and anything else you want to tell us. We use it to reply, to design the study and to price it. The form sends us an email through Resend, an email delivery service, and the email lands in our mailboxes at Hostinger.
When you send feedback on a client page
Some pages on this site are built for a client's team. Their feedback form asks for a name, an email address if the sender wants a reply, a note, and a picture and a link of what is on screen. We use it to collect the team's views for that project, and we share it with that client.
When you book a call
"Book a call" takes you to Calendly, which runs the booking under its own privacy notice. Calendly sends us your name, your email address and the time you chose.
When you email us
We keep the correspondence so we can answer you and remember what we agreed.

Where data protection law asks us to name a legal basis: we handle enquiries, feedback and bookings because you asked us to, as steps towards working together. We run the site, keep it secure and keep records of our work because we have a legitimate interest in doing so. Where we need your consent for anything else, we will ask for it.

Who handles the data for us

Some of these companies process data outside the country you are in, including in the United States, and each publishes the safeguards it relies on for that. Everything you send through the site travels encrypted. We do not sell your data, and we do not share it with anyone else, except the client whose page you sent feedback on, or when the law requires it.

How long we keep it

We keep enquiries and correspondence for as long as we are dealing with them and, if we work together, for as long as the work and our records of it need. We keep feedback sent on a client page until that project is finished. Cloudflare keeps its logs for a short time under its own policy. You can ask us to delete what we hold about you at any time.

Your rights

You can ask us what we hold about you, ask us to correct it or delete it, object to how we use it, or ask us to limit what we do with it. You can also ask for a copy of the data you gave us in a form you can take elsewhere. Email [email protected] and we will answer within a month. If you live in the European Union or the United Kingdom and are not happy with our answer, you can complain to the data protection authority where you live.

Children

This site is for people who make and commission creative work. It is not aimed at children, and we do not knowingly collect their data.

Changes

When we change this policy we will post the new version here with its date. This version is dated 2 November 2026.