Privacy

Who is responsible

This website, ffdev.studio, is run by FF DEV STUDIO (SSM 202603234793), a web design studio registered at No 15982 B, Kampung Selamat, Sungai Tong, 21500 Setiu, Terengganu, Malaysia (“FF Dev Studio”, “we”). FF Dev Studio decides how the personal data described here is used and is responsible for it.

Questions and requests about your data: hello@ffdev.studio or WhatsApp +60 13 907 8719.

What this site collects

What the site collects depends on the choice you make in the cookie banner.

• Before you choose: nothing is collected or stored. The page only asks PostHog for its settings; no event is recorded.
• If you accept: the pages you view, the links and buttons you click, which projects you open, how you arrived (the referring site and any campaign tags in the link), your device type, browser, operating system and screen size, your approximate location (country and city, worked out from your IP address, which is then discarded), page-loading speed, errors in the page, and a recording of your visit — mouse movement, scrolling, clicks and what appears on screen — with everything you type hidden.
• If you reject: the same page views and clicks, counted anonymously. Nothing is stored in your browser, there is no recording and no location, and the only identifier is a code PostHog calculates on its servers that changes every day.

The project brief and messages

When you press Submit on the “Start a project” form, what you typed (your name, email, company, note, links and the kinds of work you picked) is sent to our inbox and kept with our client records. This site does not keep a copy of it. If it cannot be sent, nothing leaves your browser and you can send the brief yourself by email or WhatsApp instead.

From then on, and for anything else you send us by email or WhatsApp, we hold it as correspondence: your name, contact details, company and whatever you choose to tell us about your project.

Why we use it

• Analytics: to see which work and pages are useful, where visitors come from, and to find and fix errors and slow pages.
• Messages and briefs: to reply to you, recommend a scope, prepare a proposal and do the work you ask for, and to keep the business and tax records the law requires.

We do not sell personal data, do not use it for advertising, and do not combine it with data from other sources.

Who else handles it

These companies process personal data for us, only to provide their service:

• PostHog, Inc. (United States): analytics and session recordings.
• Cloudflare, Inc.: hosts this site, passes analytics requests on to PostHog, and delivers the project brief to our inbox.
• Google (Google Workspace): our email.
• WhatsApp (Meta): if you message us there.

We disclose personal data to anyone else only where the law requires it.

Data stored outside Malaysia

PostHog stores analytics data in the United States. Cloudflare, Google and WhatsApp may process data in other countries where they operate. We use these providers because they protect the data they hold for us under their own security and privacy commitments.

How long it is kept

• Session recordings are deleted automatically after 30 days.
• Other analytics data is kept under PostHog’s standard retention and is used only to understand how the site is used. We delete the data tied to your browser if you ask.
• Emails, messages and project records are kept for as long as the enquiry or project needs them, and afterwards for as long as Malaysian business and tax law requires.

Your choices and rights

Under the Personal Data Protection Act 2010 you can:

• change or withdraw your cookie choice at any time, under “Cookie settings”;
• ask for access to the personal data we hold about you;
• ask us to correct it if it is inaccurate, incomplete or out of date;
• withdraw your consent, or ask us to stop or limit using your data;
• ask for a copy of your data to be sent to another organisation.

Send requests to hello@ffdev.studio. We reply within 21 days. If you are not satisfied with our answer, you can complain to the Personal Data Protection Commissioner of Malaysia.

Security

The site is served only over HTTPS. IP addresses are discarded once an approximate location has been worked out, text typed into the site is hidden from recordings, and only FF Dev Studio has access to the analytics project.

Children

This site is meant for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18.

Changes to this notice

When this notice changes, the new version is published here with a new date. Last updated 14 October 2026.