Privacy

What the Mudo website collects, what it does not, and who processes it. Written from an audit of what the site actually does rather than from a template.

Last updated

The short version

This website is marketing. It holds no practice data, no client records and no project information. The only personal information it ever receives is what you type into the demonstration request form, and that is used to reply to you.

Who we are

This website is operated under the registered business name MUDO, ABN 93 514 614 308, an Australian sole trader based in New South Wales.

What we collect

When you request a demonstration

The form asks for your name, work email, practice name and practice size. Country and a message are optional. That is everything we ask you for. We do not ask for a phone number or a job title, because we would not use them.

The form also contains one field that is hidden from people and exists only to catch automated submissions. You are never shown it and never asked to complete it, so for anyone using the site normally it stays empty and holds nothing about you. If it arrives filled in, we treat the submission as automated and discard it.

Alongside your answers we record how you reached us: the utm_source, utm_medium and utm_campaign parameters if you arrived from a campaign, the page you first landed on, the host of the site that referred you, and the pages you opened in that browser tab before submitting — their paths only (for example /pricing), at most twenty, with nothing else about them. We keep the referring host rather than the full address, so if you arrived from a search we know the search engine and not what you typed.

All of this stays in your browser until you choose to submit the form, and travels only with it. Nothing about your browsing is joined to you after the fact.

Analytics

Page views and visitors are counted by Vercel Web Analytics. It is cookieless: it sets no cookie, and it assigns you no identifier that persists between visits.

A few deliberate actions are counted by this site itself: using a "Start free", "Sign in", "Book a demo" or "See pricing" link, starting or submitting the demonstration form, and opening the pricing page or a capability page. Each is recorded with the page it happened on, the part of the page (for example the header), how the visit began (the campaign parameters or the referring site's host, as above), a device type of mobile, tablet or desktop, and a two-letter country code. Nothing else: no identifier, no cookie, no IP address and no browser details, so one recorded action cannot be connected to another, or to you.

The site does not send loading or performance measurements anywhere.

None of it carries personal information. That is enforced in code rather than by policy: the analytics layer removes anything shaped like an email address or a phone number, and the server accepts only the fixed set of fields above, before anything is stored. The test suite fails if it does not.

We also read Google Search Console, which reports how the site appears in Google Search — searches, clicks and positions — in aggregate. It is information Google already holds about its own search results; this site sends Google nothing about you for it.

Attribution storage

The campaign parameters and page paths described above are held in your browser's sessionStorage, which is deleted when you close the tab. It is not a cookie, it is never sent to us on its own, and it travels only if you choose to submit the form.

Server logs

The website is hosted on Vercel, which keeps standard request logs including IP addresses for a limited period as part of operating and securing the service. We do not build profiles from them.

What we do not do

  • No advertising or tracking cookies. Visitors to this site receive no cookies at all. The only cookie the site ever sets is an essential, secure sign-in cookie for Mudo's own authorised site administrators, used solely to keep a private administration session open. It is never set for visitors.
  • No cross-site tracking, no advertising pixels, no data brokers.
  • No selling or sharing of personal information.
  • No mailing list. Submitting the demo form does not subscribe you to anything.

Who processes information for us

Vercel hosts the website, keeps the request logs described above, and provides Web Analytics. Its infrastructure is a global edge network.

Neon hosts the database, in Sydney (AWS Asia Pacific), that holds stored demonstration requests and the action counts described above.

Resend delivers demonstration requests to us by email. When you submit the form, the information you entered — together with the attribution described above — is transmitted through Resend for delivery to our receiving mailbox.

Nobody else receives information from this website.

How long we keep things

Enquiries are kept for 24 months, then deleted.

Two exceptions. If you become a Mudo customer, the relevant records become part of that relationship and are kept under the application's own terms and whatever contractual, accounting or legal retention periods apply to it. And we will keep information for longer where the law requires it.

How that works in practice. A demonstration request arrives as an email and is also stored in our database. The database copy is deleted automatically 24 months after it was submitted — a scheduled job enforces it. The email copy is held in a mailbox and deleted on the same schedule by review rather than by automation, and we would rather tell you that than imply an automation we have not built.

The action counts described under Analytics are kept for 13 months, then deleted automatically. Page-view data is aggregate and retained by Vercel under its own retention policy. sessionStorage attribution disappears when you close the tab.

Your privacy, and the law

Mudo is an Australian sole trader operating from New South Wales.

Rather than recite statutes, this page commits to what we actually do: we handle personal information in line with the Australian Privacy Principles as a matter of practice. The commitments on this page are given voluntarily, they are not conditional on any particular law applying to a business of this size, and they do not shrink if one does not.

We do not claim compliance with the GDPR or the UK GDPR. This website is written for Australian architecture practices, is priced in Australian dollars, and is not directed at the European Economic Area or the United Kingdom. If you are in either place and send us an enquiry, it is handled exactly as described on this page: used to reply to you, kept for the period above, and deleted on request.

Your rights

You can ask what we hold about you, ask for it to be corrected, or ask us to delete it. Email admin@barklinestudio.com — requests do not need any particular form, and you do not need to cite a law to make one. We aim to respond within 30 days.

If you are not satisfied with our response, say so in a reply and it will be looked at again. Privacy enquiries reach the people who operate the site directly; there is no department to get lost in.

The Mudo application

The application at architecture.mudo.app is a separate service. Practice, project, client and financial data live there under its own terms, and nothing on this website has access to it.

Changes

The date shown at the top of this page is when it was last verified against what the website does. Material changes will move it.

Contact

For anything on this page — a question, a complaint, or a request to access, correct or delete what we hold — email admin@barklinestudio.com. That address is operated by the practice behind Mudo and is monitored; it is the same mailbox our demonstration enquiries reach. You can also use the contact page.