Privacy.

Short version: this site sets no cookies and runs no advertising or third-party tracking scripts. We collect what you choose to send us, standard server logs, and cookie-free usage statistics measured on our own server, and we never sell your personal information. If you use the landscape tool's AI scene assistant, your prompt is sent to AI providers to check it and build the scene (details below).

Who we are

This website is operated by Threadbull LLC, an engineering consultancy based in the San Francisco Bay Area, California, USA. We are the controller of the personal information described here. Contact: hello@threadbull.com.

What we collect and why

• Audit and contact requests. Name, work email, and anything you choose to add: company, role, project description, tools used, repository URL, NDA preference, urgency, and budget range. Used to reply to you, scope work, and prepare proposals. Legal basis (where GDPR applies): steps you ask us to take before entering a contract, and our legitimate interest in responding to business enquiries.
• bstats waitlist. Email address and the role you select. Used only to tell you when bstats is available. Legal basis: your consent, which you can withdraw at any time.
• Form metadata. With each submission we record the time, your IP address, and your browser's user-agent string, to prevent spam and abuse. Legal basis: our legitimate interest in keeping the forms secure.
• Landscape tool scene assistant. If you use the AI prompt in the landscape tool, we receive your prompt, a summary of the current scene, and the assistant's replies, together with your IP address and user-agent. We use them to run the assistant, to enforce usage limits, and to investigate abuse and errors. Legal basis: providing the feature you asked for, and our legitimate interest in keeping it secure. Please don't put personal information in prompts.
• Usage statistics. A small script on our pages tells our own server which page you viewed, the site that referred you, which sections of the page scrolled into view, how far you scrolled, which links and buttons you clicked, and how long the page was open, together with your IP address and user-agent. We use this to see which parts of the site are useful and which aren't. Legal basis: our legitimate interest in understanding and improving the site. See Analytics.
• Server logs. Like nearly every website, our web server logs each request: IP address, date and time, page requested, referring page, and user-agent. Used for security and troubleshooting. Legal basis: legitimate interest.

We don't knowingly collect information from children under 16, and this site isn't directed at them.

Cookies and similar technologies

This site sets no cookies, first- or third-party. Fonts and all other assets are served from our own server, so visiting a page doesn't contact anyone else. The one exception is the landscape tool at /terrain, which loads its 3D library (three.js) from the unpkg.com content network; unpkg sees your IP address when it delivers that file, as any web server does.

If you use the theme switch in the footer, your light/dark choice is saved in your browser's local storage under the key tb-theme. It never leaves your device, isn't used to identify you, and you can clear it at any time through your browser settings.

The landscape tool saves your settings and an autosave of your scene in local storage (keys starting with brycesim), so your work survives a reload. That data also stays on your device; you can turn autosave off or clear it in the tool's File tab.

Analytics

Our usage statistics are first-party: the data goes only to our own server, no outside analytics company is involved, and no cookies or cross-site identifiers are used. Raw records (including IP addresses) are deleted after 14 days. What we keep longer is aggregated, such as page views, unique-visitor counts, and how many visitors reached each section. To count unique visitors, IP addresses are replaced with a keyed hash; those hashes are dropped after 31 days, leaving only the counts.

Do Not Track and Global Privacy Control

We don't track visitors across websites. If your browser sends a Do Not Track or Global Privacy Control signal, our analytics script doesn't run; standard server logs are still kept as described above.

Sharing

We don't sell your personal information, and we don't "share" it for cross-context behavioral advertising (as those terms are defined under California law). Our hosting provider, OVHcloud, runs the server this site is on. If you use the landscape tool's scene assistant, your prompt is first checked by an AI model hosted by DeepInfra (United States) to filter out abuse, and then your prompt, the scene summary, and the conversation are sent to DeepSeek, the AI provider that generates the replies; DeepSeek processes them on its servers in China under its own terms. Your IP address is not sent to either provider. We may also disclose information if the law requires it.

Where your data is stored

Our server is in the United States. If you're outside the US, submitting a form means your information is transferred to and stored in the US, so that we can respond to your request.

How long we keep it

• Server logs: about 14 days, then deleted automatically.
• Usage statistics: raw records 14 days; hashed visitor identifiers 31 days; aggregate counts after that.
• Scene assistant logs: 30 days, then deleted automatically.
• Audit and contact requests: as long as needed to respond and for any engagement that follows. If nothing comes of it, we delete it within 24 months.
• Waitlist: until bstats launches and we've notified you, or until you ask to be removed.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw consent at any time. Email hello@threadbull.com and we'll respond within 30 days. We won't treat you differently for using these rights. If you're in the EU or UK, you can also complain to your local data-protection authority.

Every email we send you about the waitlist includes a way to unsubscribe.

Changes to this policy

If we change this policy, we'll update it here and change the effective date at the top. If a change materially affects how we use information you've already given us, we'll email you before it takes effect.