SBRINZ is one designer working in Melbourne. There is no mailing list, no advertising network and no analytics product watching you. This page sets out, plainly, the few things that do get recorded and what happens to them.
Last updated 6 October 2026
SBRINZ* is a web design studio operated by Calista Mo, a sole trader in Melbourne, Victoria, Australia. If you want anything on this page acted on, write to contact@sbrinz.com.au and a real person will read it.
Some of this studio's printed material — flyers, cards, posted envelopes — carries a QR code pointing at a short address such as sbrinz.com.au/f. Following one of those records a single line so the studio can tell which printed pieces are actually being picked up:
Your IP address is deliberately not stored. Neither is your name, your precise location, nor any device or advertising identifier. Nothing in that line identifies you, and there is no way to connect it to you or to a later enquiry. It is a tally of printed paper, not a profile of people.
The links on the studio's social profiles, on its Google listing, in its email signature and in the footer of sites it has built carry a short label, such as sbrinz.com.au/?utm_source=instagram. Two AI assistants, ChatGPT and Perplexity, add a label of their own to links they show. Arriving through one of these records a single line, and less than a printed code does:
The label is then removed from the address bar. A label the site does not recognise records nothing at all.
Your IP address is not stored. Neither is your full browser details, the page that referred you, your name, or anything you type. The line is not matched to an enquiry. It tells the studio which links people actually use. So that one visitor cannot fill the tally, these arrivals are counted per connection each hour in the same way as the forms described below: under a one-way code that changes every hour, never the address itself, and deleted within about two hours.
The enquiry form asks for your name and email, and optionally your mobile, your business name, whether you already have a website, what you would like, and a couple of preferences. All of it is optional except a name and an email, because otherwise nobody can write back to you.
What you send is stored in this studio's database and a copy is emailed to the studio's own inbox so it is not missed. It is used to answer you and to quote your work. It is never sold, never shared for marketing, and never added to any list. You will not receive newsletters or follow-up marketing because none exist.
Two quiet things keep the form from being flooded by automated scripts. First, when you open the form, a check called Cloudflare Turnstile confirms that a person is filling it in. Cloudflare reads a few technical signals from your browser to do that, such as your IP address and browser type. It says it uses them to detect bots and not to identify, profile or target anyone, and its Turnstile privacy notice has the detail. Most people see nothing at all. Now and then it asks for one click.
Second, the site counts how many enquiries arrive from one connection in an hour. It does this without storing your IP address. The count is kept under a scrambled one-way code made from the address, which cannot be turned back into it and changes every hour. These counts are kept apart from the enquiries themselves and are deleted within about two hours.
Clients and prospective clients are sometimes sent a longer brief at sbrinz.com.au/brief. It asks about your business, your customers, your competitors and your taste. It is used to design and quote your site, and for nothing else.
As you type, a draft is saved in your own browser so a long answer is not lost. That draft stays on your device and is not visible to the studio until you press the send button. Clearing your browser data removes it. Once sent, it is stored in the studio's database in the same way as an enquiry.
A brief goes through the same two quiet checks as an enquiry, described above. Turnstile starts once you begin filling in the form, and the hourly count is kept without your IP address.
The little mouse in the corner of the site sends whatever you type in it, and nothing else. No name, no email, no identifier — so if you would like a reply to a bug report, include a way to reach you.
A bug report goes through the same two quiet checks as an enquiry, described above. Turnstile starts when you open the mouse, and the hourly count is kept without your IP address. Neither is stored with your report.
There is no Google Analytics, no advertising pixel, no session recorder, no heatmap and no cross-site tracking on this site.
Visitors are not given tracking cookies. The only cookie this site sets is the one that keeps the studio's own owner logged in to her private admin pages, and it is only ever issued to someone who has entered the studio password.
Write to contact@sbrinz.com.au and you can:
You will get a reply within a few working days. If you are not satisfied with the answer, you can take a privacy complaint to the Office of the Australian Information Commissioner at oaic.gov.au.
Everything is served over an encrypted connection. The admin pages are behind a password. The database is not publicly reachable. That said, no small studio can promise perfect security, and this page will not pretend otherwise — so please do not send anything genuinely sensitive, such as identity documents, card numbers or passwords, through a web form. If something needs to be handled carefully, say so and it will be arranged properly.
This is a business-to-business studio. Its services are not directed at children and it does not knowingly collect information from them.
As a small business operator, this studio currently falls under the small business exemption in the Privacy Act 1988 (Cth). It has chosen to follow the Australian Privacy Principles anyway, because they are a sensible standard and you deserve to know what happens to what you send. That exemption is due to end on 10 December 2026, when the Privacy Act will apply to this studio in full, regardless of its size. Because this page already follows the Australian Privacy Principles, that change is expected to be a formality rather than a rewrite. Marketing email is governed by the Spam Act 2003 (Cth), and this studio does not send marketing email at all.
This policy is written to describe honestly what actually happens, not to serve as legal advice. If your own business needs a privacy policy, have a lawyer review it before you publish it.
When the site changes what it collects, this page is updated on the same day and the date at the top changes with it. There is no archive of old versions — if you want to know what a previous version said, just ask.