Privacy

This site measures itself, not you. It counts how many people arrive, how far down the page they get, how long they spend in each part of it and which parts they click — and it does that without a cookie, without an identifier, and without sending anything to Google, Meta or an advertising network.

There is no account to make and no form to fill in. The fonts are served from this domain rather than from a font network, so loading a page does not tell anyone else that you did.

Because nothing stored can be traced to a person, there is nothing to consent to and you will not see a cookie banner. Everything below is the detail.

When you leave the page, your browser sends one small message to this domain. It contains: which sections of the page were on your screen, how many seconds each one was on it, how long the visit lasted, the width of your browser window rounded to the nearest 120 pixels, the domain that linked you here if there was one, and how many times you clicked each of a few named things — a window on the desk, a project, the email address. Never where on the screen you clicked, and never anything you typed.

That message carries no name, no email address, no account, no device identifier and no cookie. It is not written down as a row of its own: it is added to that day's running totals and then it is gone. What survives is a count — nine hundred visits, forty seconds average on the philosophy section — with no way back to any individual visit, including yours.

We do this because the site is a single page and we want to know which parts of it are worth keeping. The legal basis is our legitimate interest in understanding whether our own website works (GDPR Art. 6(1)(f)); the balance sits where it does because the data is aggregated at the moment it is received and cannot be turned back into a person.

Separately, each page load is counted by Vercel Web Analytics, the measurement built into the service that hosts this site. It records the page address, the site that linked you here, an approximate location (country and city) derived from your connection, and your browser, operating system and type of device. It sets no cookie. To tell one visitor from another within a single day it uses a hash computed from the request, which is discarded after 24 hours; what we see is totals. The legal basis is the same legitimate interest.

We do not use analytics cookies, we do not fingerprint browsers, we do not track anyone across sites, and we do not share any of this.

The controller of any personal data described here is Cortex Solutions LLC, a [state of formation — e.g. Delaware] limited liability company, trading as MATIHUB, [business mailing address — street, city, state, ZIP, USA].

Contact for anything on this page, including a request to exercise your rights: info@matihub.com. There is no statutory obligation for a studio this size to appoint a Data Protection Officer and none has been appointed; your request goes to the address above and is handled there.

We are a US company. European and UK data-protection law still applies to us where we offer services to people in those regions, which we do, so the rights set out below are real and we honour them.

We do not collect your name, your precise location, your device identifiers or any profile of you. We do not build audiences, we do not run advertising, and we do not sell or rent data to anyone — there is nothing to sell.

Apart from the page-view counting our host provides, described above, there is no analytics product on this site, and we do not intend to add one that follows you. If that ever changes, this page changes first, and so does the question of whether you get asked.

The addresses on this site are ordinary mailto: links — clicking one opens your own mail application. Nothing is submitted through this website.

When you do write, we receive what you send: your email address, your name if you sign it, and whatever you tell us about the work you have in mind. We use it to answer you, to prepare a proposal, and to carry out any engagement that follows. The legal basis is your request and, once there is one, the contract between us.

We keep business correspondence while the enquiry or the engagement is live, and afterwards for as long as we must keep records — generally seven years for anything tied to an invoice. Correspondence that leads nowhere is deleted once it is clearly closed. Our mail provider processes it on our behalf and not for their own purposes.

Like every web server, Vercel's record requests: the IP address a request came from, the time, the file requested, the response status and the browser's user-agent string. This is how the internet works rather than something we switched on.

We do not analyse those logs, we do not join them to the measurement counters, and we could not link the two if we wanted to — the counters have no visit identifier to join on. The logs exist so faults and abuse can be diagnosed, on the basis of our legitimate interest in running the site, and Vercel keep them on a short rolling window under their own policy.

Browsing this site sets no cookies. There is no login, no basket and no session to keep, and the measurement described above deliberately works without one — which is why there is no cookie banner on this site and no consent to click through.

One cookie exists in one situation only. If you are a client who has been sent a private preview link, entering its password sets a cookie named mh_ followed by that project's name. It holds a signed token and an expiry and nothing else — no identifier, no email address, nothing that describes you — so that you are not asked for the password on every page. It is HttpOnly, Secure and SameSite=Lax, and it expires after 30 days. Deleting it signs you out. It is strictly necessary for something you asked for, so it needs no consent.

If we ever add something that is not strictly necessary, you will be asked first, properly, before it is set.

The home page remembers two small preferences using your browser's local storage: matihub.desk, which is where you last dragged the folders on the desk, and matihub.sfx, whether you turned the interface sound off.

These are not cookies, they are never transmitted, and we cannot read them. They sit in your browser, on your device, and clearing your site data removes them. They contain no personal information.

Some work is published under matihub.com behind a password so the client can review it before it is public. When a password is submitted it is checked against the value we hold and then discarded — it is not logged and not stored anywhere by this site.

We do not record who opened a preview or when. If you are a client, treat the link and the password as confidential, and tell us if either should be changed.

A few client projects are reachable at a matihub.com address but are in fact delivered from the client's own deployment. When you open one of those, you are interacting with the client's site: their code runs, their policies apply, and anything it collects is collected by them, not by us. Their privacy notice governs it, not this one.

Vercel Inc. host and deliver this site and run both the function that receives our own measurement and the page-view counting described above. Our email provider carries our correspondence. Both act on our instructions under the data-processing terms the GDPR requires. Nobody else receives anything: there is no separate analytics vendor, no ad network, no data broker, and no script from anyone other than our host.

We are a US company and both providers are established in the United States. For visitors in Europe and the UK, that means personal data in transit — an IP address reaching a server, an email arriving — leaves the EEA. Those transfers rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework.

Our own stored analytics contain no personal data to transfer, because they are counters. Vercel's page-view figures are aggregated the same way.

If you are in the European Economic Area or the United Kingdom, you have the right to ask what we hold about you, to have it corrected, to have it erased, to have its processing restricted, to receive it in a portable form, and to object to processing we base on legitimate interest.

If you are in California or another US state with a comprehensive privacy law, you have comparable rights to know, delete and correct, and to opt out of sale or sharing. We do not sell or share personal information as those laws define it, and we never have. We do not use it for targeted advertising and we do not profile anyone.

Write to info@matihub.com and we will answer within one month, free, and without making it difficult. We will not treat you differently for asking.

If you think we have handled your data badly you may complain to your own data-protection authority — in the EEA, the supervisory authority of the country you live or work in; in the UK, the Information Commissioner's Office. We would rather you told us first, but it is your right either way.

This site is aimed at businesses and is not directed at children. We do not knowingly collect anything from anyone under 16.

If how this site handles data changes, this page is updated and the date at the top changes with it. Material changes will be described here rather than slipped in.