Privacy Policy
Updated 28 September 2026: we now measure whether our Google ads lead to conversations with Blu, which adds Google Ads cookies and stores how you found us with your conversation. See How you found us and Cookies and analytics. Updated 24 September 2026: we started using Google Analytics, which sets cookies, and this policy began covering Bluefin Ads Manager, our internal Google Ads tool.
The short version
- We use Google Analytics and Google Ads conversion measurement, which set cookies, to see how people use this site and whether our ads work. You can block them in your browser settings.
- We don't sell or rent your information. Ever.
- Conversations with Blu, our AI assistant, are stored in our database and can be read by our team.
- Blu is also a demo of what we build for clients, so we may show real conversations as examples of our work. Ask us and we'll exclude yours.
- We only know your name or email if you type it in yourself.
- Email hello@bluefin.studio and we'll show you what we have or delete it.
Who we are
Bluefin Studio is a digital design studio based in Santa Monica, California. This policy covers bluefin.studio and Blu, the AI assistant built into the site. If you have questions about anything here, write to hello@bluefin.studio.
What we collect
- Your conversations with Blu
- Blu is an AI assistant that answers questions about our work and services. Everything typed into that chat is saved to our database, and our team can read it. That includes anything you volunteer about yourself or your business.
- Contact details you choose to give us
- If you fill in our contact form, or ask Blu to pass a message to the team, we collect the name, email address, and message you enter. We don't ask for these anywhere else, and you can use the whole site without providing them.
- Your website, if you share one
- If you give Blu the address of a website, our system visits that public page and reads its text, colours, and fonts so it can talk about your brand usefully.
- Automated analysis of conversations
- After a conversation ends, we run it through an AI model to produce a short internal summary — what services you seemed interested in, any timing or budget you mentioned, and how we'd prioritise following up. This is only used to prepare our team for a conversation with you. It is never used to make decisions about credit, employment, housing, insurance, education, or healthcare.
- Basic traffic measurement
- We use Vercel Web Analytics and Vercel Speed Insights to count visits and monitor page performance. These are cookieless: they don't store anything on your device and don't build a profile of you. They do briefly process technical details of your request, such as IP address, browser, and referring page, to count a visit and measure load times.
- Google Analytics
- We also use Google Analytics to understand how visitors find and use the site: which pages are viewed, how long visits last, roughly where visitors are, and what device and browser they use. Google Analytics uses cookies to do this, described below.
- How you found us
- If you arrive by clicking one of our Google ads, or a link tagged with campaign details, the link carries an ad click ID and campaign labels: the source, the campaign, and the search keyword. The site keeps them in your browser's session storage until you close the tab and passes them to Blu, and we store them with your conversation so we can see which ads bring people who want to talk to us.
Cookies and analytics
This website uses cookies set by Google Analytics (named _ga and _ga_ followed by an ID). They let Google Analytics recognise a returning browser so it can measure visits. We don't set any other cookies ourselves.
The Google Ads tag also sets cookies (such as _gcl_au, plus _gcl_aw when you arrive from one of our ads) so Google can tell us whether an ad led to a conversation with Blu or a booked call. We've turned off ad personalization for every Google tag on this site, so this data isn't used to build ad audiences or to show you ads elsewhere.
Google processes this data on our behalf. You can read how Google uses information from sites that use its services. To stop Google Analytics from measuring your visits, block cookies in your browser settings or install Google's Google Analytics opt-out browser add-on. The site works the same either way.
Do Not Track
Some browsers can send a "Do Not Track" signal. There is no common industry standard for how to respond to one, and we do not currently respond to Do Not Track signals. We mention this because California law requires us to tell you either way. You can still block these cookies as described under Cookies and analytics.
Tracking across other websites
We don't run social media trackers, and we don't use remarketing. Apart from Google Analytics and Google Ads conversion measurement, described above, no third party collects information about your activity on this site.
Showing conversations as examples of our work
Building AI front desks is one of our main services — we design and build them for clients, running on their own websites under their own names. Blu is both our assistant and a live demonstration of that service.
Because of that, we may show real conversations with Blu to prospective clients, to illustrate how the assistant handles a conversation and what it picks up. This is the one situation where something you typed may be seen by someone outside Bluefin Studio. We are not paid for it, and we don't hand over transcripts, files, or contact details — it's shown as an example of our work.
It is also the main reason we ask you not to type anything sensitive into the chat. If you'd rather your conversation was never used as an example, email hello@bluefin.studio and we'll exclude it.
Assistants we build for our clients
This policy covers bluefin.studio and Blu only. If you're talking to an assistant we built for one of our clients — living on their website, under their own name — then that company is responsible for the conversation and their privacy policy applies, not this one.
Who we share information with
We do not sell, rent, or trade personal information, and we do not share it for advertising. Aside from the examples described above, the only other parties who see anything are the service providers we rely on to run the site:
- Anthropic
- Provides Claude, the AI model behind Blu. Your chat messages are sent to Anthropic so it can generate a reply. Under Anthropic's commercial terms, Anthropic does not use this content to train its models, and deletes it within 30 days — except where its automated safety systems flag content, or the law requires it to keep it longer. This is separate from the copy we keep ourselves, described under How long we keep things.
- Supabase
- Hosts the database where conversations and messages are stored.
- Vercel
- Hosts the website and provides the cookieless analytics described above.
- Provides Google Analytics and Google Ads, including the conversion measurement described under Cookies and analytics.
- Web3Forms
- Delivers messages to our inbox — both from our contact form and from the "leave a message for the team" form inside the chat.
We may also disclose information if the law requires it, or to protect our rights or someone's safety.
How long we keep things
We keep conversation transcripts and contact messages for up to 24 months, and then delete them. If we end up working together, the records relating to that project are kept for as long as the engagement and our business records require.
You don't have to wait for that. You can ask us to delete your data at any point before then — see Your choices below.
Please don't send us sensitive information
Blu is a front desk for a design studio, not a secure channel. Please don't type payment card details, government ID numbers, passwords, health information, or anything similarly sensitive into the chat or our forms. We don't need any of it, and we'd rather it never reached our database. If you send it anyway, we'll delete it.
Your choices
You can email hello@bluefin.studio at any time to:
- ask what information we hold about you;
- ask us to correct or update it;
- ask us to delete it.
We'll respond within a reasonable time, and we won't treat you differently for asking. We may need to confirm who you are first, so that we don't hand your information to someone else.
Bluefin Studio is a small business and does not meet the thresholds that make the California Consumer Privacy Act apply to us. We offer the choices above regardless, because they're the right ones to offer.
Bluefin Ads Manager
Bluefin Ads Manager is an internal tool our team uses to manage Google Ads campaigns through the Google Ads API, for our own advertising and for clients who have linked their Google Ads accounts to ours. Only Bluefin Studio staff sign in to it.
When a team member signs in with Google, the tool asks for permission to manage Google Ads accounts. It uses that access only to create, update, and report on campaigns in the accounts we manage. It does not access Gmail, Google Drive, contacts, or any other Google data. It stores campaign settings and summary performance numbers only, and sign-in credentials are kept on our team's own computers. We don't sell or share this data, and one client's account data is never shown to another client.
Bluefin Ads Manager's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Children
This site is aimed at businesses and isn't directed at children. We don't knowingly collect information from anyone under 16. If you believe a child has sent us something, email us and we'll remove it.
Changes to this policy
If we make a material change to this policy, we'll update the effective date at the top of this page and post a notice on this page for at least 30 days. Significant changes may also be announced on our home page.
Contact
Bluefin Studio
Santa Monica, California
hello@bluefin.studio