Privacy

Privacy Policy

Last updated: May 9, 2026

This policy explains what personal information Thinksciences ("we", "us", "our") collects when you use our website at www.thinksciences.com, why we collect it, how we use it, and the rights you have over it.

1. Who we are

Thinksciences is an independent app studio operated by Thinksciences LLC, a limited liability company organized under the laws of the State of New Jersey, United States.

Contact: hello@thinksciences.com

For purposes of the EU and UK General Data Protection Regulation, we act as the data controller of any personal information you provide through this website. For purposes of US state consumer privacy laws (including the New Jersey Data Privacy Act), we act as the "controller" or "business" with respect to your personal data.

2. What we collect and why

Newsletter subscriptions

If you subscribe to our newsletter, we collect your email address. We use it only to send you the newsletter you've asked for. We rely on your consent to send these emails (GDPR Article 6(1)(a) for EU/UK visitors), which you can withdraw at any time using the unsubscribe link in every email.

Contact form

If you send us a message through the contact form, we collect your name, email address, and message content. We use this information solely to read and reply to your inquiry. We rely on our legitimate interest in responding to people who contact us (GDPR Article 6(1)(f) for EU/UK visitors).

Server logs

When you visit the site, our hosting provider (Cloudflare) automatically records standard server log information — IP address, user agent, request time, requested page, referrer. This is used for security, abuse prevention, and operational diagnostics, retained for a short period, and never linked back to identifiable individuals by us.

Cookies and tracking

We do not set advertising cookies, analytics cookies, or any tracking technologies on this website. We do not use Google Analytics, Meta Pixel, or similar profiling tools. If this changes in future, we will update this policy and ask for your consent where required.

3. Third-party services we use

We use the following processors to operate the site. Each is bound by its own privacy commitments and applicable data-processing agreements:

• Buttondown — newsletter delivery. Stores subscriber email addresses. Privacy policy.
• Web3Forms — contact form delivery. Forwards form submissions to our inbox; does not store them long-term. Privacy policy.
• Cloudflare — site hosting, DNS, and security. Privacy policy.
• Google Workspace — the inbox we use to read and reply to messages sent through the contact form. Privacy policy.

4. International transfers

We are based in the United States, and the processors listed above operate primarily in the United States. If you access this site from the European Economic Area, the United Kingdom, or another jurisdiction outside the United States, your personal information will be transferred to and processed in the US. For such transfers we rely on the providers' Standard Contractual Clauses, the EU–US Data Privacy Framework, the UK extension to that framework, or equivalent safeguards.

5. How long we keep your data

• Newsletter: until you unsubscribe.
• Contact-form messages: kept in our inbox for up to 24 months after the conversation ends, then deleted.
• Server logs: as per Cloudflare's standard retention (typically under 30 days).

6. Your rights

Depending on where you live, you may have some or all of the following rights with respect to your personal information:

• Access — ask us to confirm whether we hold personal data about you and to provide a copy.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — ask us to delete your personal data ("right to be forgotten").
• Portability — receive your data in a machine-readable format.
• Opt out — opt out of targeted advertising, the sale of your personal data, or significant profiling. We do not sell personal data and we do not engage in targeted advertising.
• Withdraw consent — withdraw consent at any time, where consent is the basis for processing (for example, the newsletter).
• Non-discrimination — we will not discriminate against you for exercising any of these rights.
• Lodge a complaint — with the New Jersey Division of Consumer Affairs, the US Federal Trade Commission, or, if you are in the EU/UK, your local data protection authority.

To exercise any of these rights, email hello@thinksciences.com. We will respond within 45 days (or one month for EU/UK requests under GDPR), and we may need to verify your identity before acting on a request. You may also designate an authorized agent to make a request on your behalf.

7. New Jersey and other US state residents

The New Jersey Data Privacy Act ("NJDPA") and similar laws in California, Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, and other US states give residents specific rights over their personal information. Those rights are summarized in Section 6 above and apply regardless of which state you live in.

Sale of personal information. We do not sell personal information for monetary or other valuable consideration, and we do not share personal information for cross-context behavioral advertising or targeted advertising.

Sensitive data. We do not collect sensitive personal information (such as precise geolocation, biometrics, government IDs, health data, or information about children under 13).

Appeals. If we deny a request you make under the NJDPA or another state law, you may appeal that decision by replying to our response email. If your appeal is denied, you may contact the New Jersey Division of Consumer Affairs.

8. Children

This website is not directed at children, and we do not knowingly collect personal information from children under 13 in compliance with the federal Children's Online Privacy Protection Act ("COPPA"). We also do not knowingly process the personal data of consumers we know to be between the ages of 13 and 17 for purposes of targeted advertising, sale, or significant profiling, consistent with the New Jersey Data Privacy Act. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Security

All form submissions and site traffic are encrypted in transit using TLS. We use reputable processors with their own security commitments. No system is perfectly secure, however, and we cannot guarantee absolute security of data transmitted over the internet.

10. Changes to this policy

We may update this policy as our practices or the law change. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated via the newsletter or a notice on the homepage.

11. Contact us