MDG Creative Studio ← Back to the site
Privacy

Privacy policy.

Last updated: 26 October 2026 (profile photo)

At MDG Creative Studio, privacy is taken seriously. This page explains, in plain terms, what data is collected, why, how long it is kept, and what your rights are. It covers the site, Flux, the motion design studio (section 09), and Nourris Flux, the Flux idea box (section 10). It is written in line with Senegalese law no. 2008-12 of 25 January 2008 on the protection of personal data.

01 Data controller

The data controller is Mouhamed Al Amine (MDG Creative Studio), Kabatoki, Kaolack, Senegal. Contact: mdgdesign221@gmail.com or WhatsApp on +221 76 377 22 08.

02 Data collected

We only receive personal data when you choose to write to us: through a form on the site, through Nourris Flux (section 10), or through a message Flux prepares for you (section 09). We also receive the data of your Flux account if you create one (section 09). No advertising profiling. Your Flux projects stay on your device.

When you fill in a form (project enquiry, pack booking), the following is collected:

With every project or pack request, two technical details are recorded: your IP address and your browser identifier (user-agent). They serve only to limit automated submissions of these forms, no more than five requests per hour per address, and never to track you. What technical services receive on each visit is described in section 04.

If you sign up for the Learning Center, only your email address is collected, so we can send you the modules.

03 Purpose & legal basis

Form data is used solely to get back to you and to prepare a quote or start a project. Messages and ideas sent for Flux are used to reply to you, fix problems and improve Flux (sections 09 and 10). The technical details and the fingerprint described in section 10 serve only to protect the forms from abuse. Depending on the case, the legal basis is your consent, given when you choose to write to us, or the preparation of the quote or contract you ask us for. The data of your Flux account is used to identify you, to give you access to your projects on the device and to send you the account emails (confirmation, forgotten password): this is necessary to provide Flux under the terms you accept. The sign-in logs and the log of sensitive actions are used to protect accounts and Flux from abuse: this is our legitimate interest in keeping the service secure. Some data may be kept to meet a legal obligation or to handle a dispute. This data is never sold, rented, or used for advertising.

04 Processors & third-party tools

To operate, the site and Flux rely on these services:

Web3Forms
Forwards form content to our inbox. The data passes through their servers for the time it takes to send. Web3Forms policy
Supabase
Hosts, in a private space, the requests received through the forms, with the technical details from section 02, the Nourris Flux ideas with their files, and Flux accounts (section 09). Flux accounts are hosted in its Paris data centre, in France. Supabase policy
Resend
Sends the emails for your Flux account (the confirmation link, the link to choose a new password): it receives your email address and the content of these emails. According to its documentation, email content and delivery logs are kept in the United States for 30 days. Resend policy
Google (sign-in)
If you choose “Continuer avec Google”, Google identifies you and passes your email address, your name and the link to your profile photo to Supabase, where they are kept with your account (section 09). Flux shows this name and this photo at the top of its interface, to you alone: the photo is then loaded from Google's servers, which receive your IP address. You can remove it, or replace it with another one, in “Mon compte”. Flux asks for no other access to your Google account.
Vercel
Hosts the site and Flux. On each visit it receives your IP address and information about your browser, which it keeps in its logs. It also measures audience on the site's pages (Vercel Analytics), without cookies; Flux does not measure audience. Vercel policy
Google Fonts
Serves the Flux typefaces as soon as it opens, and receives your IP address and information about your browser. The site's pages serve their own typefaces. Google policy
jsDelivr
Serves open-source software to the Learning Center, and to Flux when it needs it (maps, flags, .flux files, exports); receives your IP address. jsDelivr policy
Open-Meteo
Finds a place you search for by name on a Flux map; receives the text you type and your IP address. Open-Meteo terms
WhatsApp, Gmail, Instagram
When you write to us, from the site or from Flux, your message reaches our WhatsApp, our Gmail inbox or our Instagram account, and is also subject to the rules of Meta or Google.

When you click through to WhatsApp, Instagram, Behance, TikTok or Spotify, you leave this site and come under the privacy policy of the platform concerned.

These services may technically access what they host or transmit, under their own terms. They are based outside Senegal, so what reaches them is processed abroad: Flux accounts in France (Supabase, in Paris), account emails in the United States (Resend), the technical data of visits notably in the United States (Vercel, Google, jsDelivr); some processing by these providers may take place elsewhere, under their own rules. The content of your Flux projects stays on your device, except what you choose to send us.

05 Cookies

Neither the site nor Flux uses advertising or tracking cookies: no Google Analytics, no Meta pixel, no marketing tool. The site's audience measurement (Vercel Analytics) works without cookies or tracking identifiers; Vercel still processes the technical visit data described in section 04.

Some pages keep your preferences in your browser's local storage, such as the chosen language or your progress in the Learning Center, and Flux keeps your projects and settings there (section 09). This storage stays on your device, is not sent to us and is not used to track you. It is erased with the site data, in your browser settings. Your Flux session (what keeps you signed in) is kept the same way, in your browser's storage: it is not a cookie, and it is erased when you sign out.

06 Retention period

Messages received through the forms are kept for as long as needed to handle your enquiry, then for no more than 3 years after our last exchange, for follow-up purposes. You can ask for them to be deleted at any time.

Ideas and problem reports sent from Flux are kept for as long as it takes to reply and follow up on the idea or problem, then for 3 years at most after our last exchange. Nourris Flux ideas and their files are kept for as long as it takes to study and use them, for 3 years at most after they are sent, and we sort them once a year. Whatever is no longer useful is erased sooner. Your Flux projects are never with us.

The data of your Flux account is kept for as long as you use your account. When you ask for it to be closed, we erase its data within 30 days, except what we must keep for a legal obligation or a dispute. The log of sensitive actions (section 09) is kept for 1 year for security. Supabase's sign-in logs (IP address, browser, time), its backups, and the emails kept by Resend (30 days) follow these providers' own retention periods. Closing the account does not erase the projects on your device: you manage them (section 09).

07 Your rights

Under the law, you have the right to access, correct, object to and delete your data. To exercise it, write to mdgdesign221@gmail.com. You may also refer the matter to Senegal's Personal Data Protection Commission (CDP): www.cdp.sn.

We reply within one month at most. We may ask you for what is needed to check that the request really comes from you, and nothing more. If we cannot fully act on it, we tell you why and how to challenge it. For your Flux account, these rights cover all its data (section 09): your name can be corrected from “Mon compte”; to get a copy, to object to a processing, or to close your account, write to us at the address above. Since your Flux projects are on your device, you manage them: we can neither view nor erase them. If you live in the European Union, you can also contact your country's data protection authority.

08 Security

The site and Flux are served exclusively over HTTPS: your exchanges with them are encrypted in transit. Their security headers limit what the browser can load; for Flux, only its own address, Google Fonts, jsDelivr, Open-Meteo, Supabase and, for profile photos, Google's image servers; the camera only when you use it (ticket checking), never your location. Your password is handled by Supabase, which does not keep it in plain text: we never see it. Each account can only access its own data, and we have checked this with tests. Team actions on accounts (changing a role, suspending an account) require two-step verification and are written to a log that Flux does not allow to be changed or erased. These measures reduce risks without being able to remove them all. If an incident affects your data, we take the necessary measures and notify you when the law requires it.

Your account. If you create an account, we keep at Supabase, in particular: its identifier; your email address; your password, hashed; your name, if you give one; your profile photo, if you upload one: Flux crops it and saves it again as a 256-pixel square, without the camera information, in a private space only you can read; it is erased when you remove it; the date the account was created and the date of your last sign-in; its status (active or suspended) and its role (user, or team member); the version of the terms of use you accepted and its date; and, for sensitive team actions on your account, a line in the log. If you sign in with Google, your Google identifier, your name and the link to your profile photo are added. Supabase also keeps logs of your sign-ins, for security. The content of your projects is not there.

What Flux keeps on your device. In your browser's storage, Flux keeps your session, which keeps you signed in, and, in your account's space, your projects, their thumbnails, and the photos, videos, sounds and voices you add to them; a copy of the open project, to find it again after a reload; the layers you copy; your settings (panels, favourites, tab colours, hints); the names of the computer fonts you add; the version of the terms of use you accepted and its date; and the draft of your help messages, until you confirm they were sent. Your videos and images are computed on your device and downloaded to it. None of this reaches us, apart from your session, presented to Supabase to sign you in, and what you choose to send us; none of it is used to track you. Flux sets no cookies.

Erasing. A project moved to the bin stays there for 30 days, then is erased the next time Flux starts. “Supprimer pour de bon” and “Vider la corbeille” erase it at once, with the photos, videos, sounds and voices that none of your other projects use; if erasing is interrupted, Flux finishes it the next time it starts. To erase everything at once, “Effacer toutes mes données de Flux”, under “Sur cet appareil” on the Flux home screen, erases your projects, their media and your Flux settings, for good; with an account, it erases those of your account on this device, and keeps you signed in. Signing out does not erase your projects from the device: they wait for you at your next sign-in. Files you have downloaded stay on your computer.

The move. Until 12 October 2026, Flux was served at www.mdgcreative.studio/studio; it is now served at fluxmotion.vercel.app. The browser keeps each address's projects separately. The page at the old address carries your projects, their media and a few settings over to the new one, when you ask it to, from one window of your browser to the other, without going through our servers. It erases nothing by itself; “Effacer les anciennes données de Flux” then erases the old address's copy, if you decide to.

What Flux asks your browser for, and only when you do it. The microphone, when you record a voice message: the recording, 5 minutes at most, stays in your project. The list of your computer's fonts, when you open it in “Mes polices”: Flux only keeps the names of the ones you add. Access to a .flux file you choose, to open it or save it again. And protection of its storage, so the browser does not erase it when space runs low; some browsers ask you about it. Flux has no access to your camera, your location or your screen.

What goes to other services. To work, Flux calls on the services in section 04, which receive your IP address and information about your browser: Vercel, which hosts it, on every load; Google Fonts, for its typefaces, as soon as it opens; Supabase, when you sign in, then regularly to keep your session (it is Supabase that has Resend send your account emails); jsDelivr, only when Flux shows a map or a flag, opens or saves a .flux file, or exports to GIF, MP4, WebM or an image sequence; Open-Meteo, only when you search for a place by name on a map: it then receives the text you type, from two letters on. To send it nothing, paste coordinates (for example “14.69, -17.44”). Flux does not measure audience, sends no error reports and does not track what you do.

When you write to us from Flux. “Proposer une idée”, “Signaler un problème” and “Contacter l'équipe” send nothing themselves: Flux prepares your message in WhatsApp or in your email app, and you are the one who sends it. With WhatsApp, the prepared text goes through WhatsApp as soon as the link opens.

An idea contains its category, its title, its description, your first name if you give it, and the Flux version. A problem report contains what you describe and your first name if you give it. If you leave the “Joindre les informations techniques” box ticked, it also contains the Flux version, your browser, your system and its language, the size of the screen and window, the shape of the open project (format, length, number of layers, without its name, texts or media), the workspace and mode, and the last five Flux errors. You see everything before sending, under “Voir ce qui sera joint”. If you add a screenshot or a file to your message yourself, it reaches us too.

We receive your message with your WhatsApp number or your email address. It is used to reply to you, fix problems and improve Flux, and it is kept as stated in section 06.

What you send. The Nourris Flux page receives your ideas for Flux: a text, up to five links as you paste them, and up to five files, with their original name, type and size. A name and a way to thank you are optional. Agreement for MDG to draw on it is required; agreement to be credited is optional. Unlike your Flux projects, these files you choose to send leave your device.

Files. Photos (JPEG, PNG, WebP) are redrawn on your device before sending and lose their metadata; a photo that cannot be redrawn is not sent. Videos, GIFs and PDFs are sent as they are, with what they contain: a phone video may contain the place where it was shot.

Protections. Your IP address is used, at that moment, to compute a fingerprint with a secret key, which limits bursts of submissions; the address itself is not kept. The fingerprint is still personal data: it is erased after one day. The time spent filling in the form is measured to keep robots out, and is not kept.

Where, and what for. Your submission and your files are kept in a private space at Supabase. Only MDG has access to them, and nothing is published. They are used to create features, animations and templates for Flux, to thank you if you left a way to do so, and to credit you if you agreed. They are kept as stated in section 06. With each submission, MDG receives an alert that contains nothing of what you wrote.

Your rights. To see, correct or have erased what you sent, write to mdgdesign221@gmail.com. Erasing an idea also erases its files; the administration keeps no copy of it.