Privacy Policy

Last Updated: February 15, 2026

Lemon Crate Studio LLC (“we,” “us,” or “our”) operates the website at lemoncratestudio.com and publishes mobile applications (collectively, our “Services”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use any of our Services.

By using our Services you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Services.

1. Information We Collect

A. Information You Provide

  • Contact form submissions. When you use the contact form on our website (powered by Formspark), we collect your name, email address, and the content of your message.

B. Information Collected Automatically

On our website:

  • Usage data — pages visited, time and date of visits, time spent on pages, referring URLs, and links clicked
  • Device data — browser type and version, operating system, screen resolution
  • Network data — IP address, approximate geographic location (city/country level)

In our mobile applications:

  • Usage data — screens viewed, features used, session duration, in-app events
  • Device data — device model, operating system version, language settings, screen resolution
  • Advertising identifiers — such as IDFA (iOS) or Google Advertising ID (Android)
  • Approximate location — derived from IP address or device-level location services, used for personalized content, analytics, and advertising
  • Mobile network data — carrier name, connection type (Wi-Fi/cellular)
  • Crash and performance data — crash logs, stack traces, performance metrics

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

  • Consent — where you have given clear consent (e.g., submitting our contact form or opting in to analytics)
  • Legitimate interests — to operate, maintain, and improve our Services, provided these interests are not overridden by your rights
  • Contract performance — to provide and support the Services you use
  • Legal obligation — to comply with applicable laws, regulations, or legal processes

3. Third-Party Services

We use the following third-party services that may collect and process data on our behalf. Each service has its own privacy policy governing the data it collects.

A. Website

  • PostHog (analytics) — configured with in-memory persistence only; no data is stored beyond your current browser session — Privacy Policy
  • Formspark (contact form processing) — Privacy Policy
  • Cloudflare (hosting, CDN, DDoS protection) — Privacy Policy

B. Mobile Applications

C. Cookies and Tracking Technologies

  • Website: Our analytics (PostHog) uses in-memory persistence and does not set persistent cookies. Cloudflare may set strictly necessary cookies for security and performance.
  • Mobile applications: Our ad partners and analytics providers may use device advertising identifiers, SDKs, and similar technologies to collect information about your use of our apps and other apps. You can limit ad tracking through your device settings (see Section 7).

D. When We May Share Information

We may disclose information in the following circumstances:

  • With service providers listed above, to operate and improve our Services
  • To comply with law — in response to subpoenas, court orders, or legal process
  • To protect rights and safety — when we believe disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud
  • Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

4. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our Services
  • Respond to your inquiries and contact form submissions
  • Analyze usage patterns to improve our website and applications
  • Deliver and personalize advertisements in our mobile applications
  • Monitor and improve performance, stability, and security
  • Detect and prevent fraud, abuse, and technical issues
  • Comply with legal obligations and enforce our terms

5. International Data Transfers

Our Services are operated from the United States. If you access our Services from outside the US, your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate.

For transfers of personal data from the EEA, UK, or Switzerland, we rely on:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • EU-US Data Privacy Framework, where applicable
  • Other legally recognized transfer mechanisms

6. Your Rights (GDPR / UK GDPR / LGPD)

If you are located in the EEA, UK, or Brazil, you have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate or incomplete data
  • Erasure — request deletion of your personal data (“right to be forgotten”)
  • Restriction — request that we limit the processing of your data
  • Data portability — receive your data in a structured, machine-readable format
  • Object — object to the processing of your data based on legitimate interests or for direct marketing
  • Withdraw consent — withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal
  • Lodge a complaint — file a complaint with your local Data Protection Authority

To exercise any of these rights, please contact us at contact@lemoncratestudio.com. We will respond within 30 days (or sooner if required by applicable law).

7. US State Privacy Rights

California (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose
  • Delete your personal information
  • Opt out of the sale or sharing of your personal information
  • Non-discrimination for exercising your rights

We do not “sell” personal information as traditionally defined. However, certain uses of advertising identifiers in our mobile apps may constitute “sharing” under the CPRA. You may opt out by adjusting your device’s ad tracking settings or contacting us.

We honor Global Privacy Control (GPC) signals as a valid opt-out request.

Do Not Track: There is currently no industry standard for how to respond to Do Not Track browser signals. Our website does not alter its behavior in response to DNT signals.

Other US States (Virginia, Colorado, Connecticut, and others)

Residents of states with comprehensive privacy laws (such as the VCDPA, CPA, and CTDPA) have similar rights to access, delete, correct, and opt out of targeted advertising. To exercise these rights, contact us at contact@lemoncratestudio.com.

8. Automated Decision-Making

We do not use automated decision-making, including profiling, that produces legal or similarly significant effects on you.

9. Data Retention

  • Website analytics: PostHog is configured with in-memory persistence only. No analytics data is retained beyond your current browser session.
  • Contact form submissions: We retain your name, email, and message for as long as reasonably necessary to respond to your inquiry and for our records.
  • Mobile app data: Analytics and advertising data collected by third-party partners is retained according to each partner’s own data retention policies (see links in Section 3).
  • Deletion requests: To request deletion of any personal data we hold, email us at contact@lemoncratestudio.com.

10. Children’s Privacy

Our Services are not directed at children under the age of 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children under these ages. If we discover that we have inadvertently collected personal information from a child, we will promptly delete it. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@lemoncratestudio.com.

11. Data Security

We take reasonable measures to protect your information, including:

  • HTTPS encryption on all website communications
  • Cloudflare DDoS protection and web application firewall
  • Reasonable administrative, technical, and physical safeguards

No method of transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. For material changes, we will provide prominent notice (such as a banner on our website). Your continued use of our Services after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us: