Privacy Policy

This site is a portfolio and lead-generation site for GizmoUGC, an AI advertising agency. It has no advertising cookies, no third-party ad trackers, and no analytics scripts running behind your back.

The only data we actively ask for is what you type in: a brand name if you play the creative lottery, and your booking details if you schedule a call. Everything else is either stored on your own device or generated automatically by the web server.

GizmoUGC (“we”, “us”, or “the site”) is the controller responsible for your personal data under this policy. This policy applies to gizmougc.com and the pages linked from it.

Where this policy refers to data we “collect”, it means data that reaches us or our hosting provider — whether typed by you, sent automatically by your browser, or produced by our server when you interact with a feature.

We collect three categories of data, and nothing else.

• Leaderboard entries — if you enter a brand name in the creative lottery tool, we store that name, the category you pick, and the number of attempts you spend. We store this in our own database so your score keeps improving each time you play. We do not associate it with your name, your email, or any identifier that ties it back to you.
• Booking details — if you book a call through our scheduling page, the scheduling provider (Cal.com) collects your name, email address, timezone, and any notes you add. Cal.com processes that data on our behalf under its own privacy policy. We receive the booking so we can show up to the call.
• Server logs — our host automatically records IP address, browser type, requested page, and timestamp for every visit. These are ordinary web server logs, used for security and debugging, and are not linked to anything you submit.

We set no cookies on this site. There is nothing to accept, nothing to decline, and no cookie banner.

We do store one thing in your browser's local storage: whether you chose light or dark mode, under the key gizmougc-theme. It never leaves your device, contains no personal data, and is used only to keep the site on the theme you picked. You can remove it at any time by clearing your browser's site data.

We do not run Google Analytics, Meta Pixel, or any advertising or cross-site tracking script.

Two third parties are involved when you choose to use them, and both are named here so you know exactly where your data goes:

• Cal.com — the scheduling provider behind the “Book a call” buttons. Its embed loads only when you open a booking page. Read their privacy policy for how they handle booking data.
• Our hosting provider — the company that serves the site from its servers, and which generates the access logs described above.

Personal data is only used for the reasons it was collected:

• To show you your leaderboard entry and keep your best score between visits.
• To schedule, prepare for, and hold the call you requested.
• To keep the site secure, debug errors, and understand in aggregate whether pages work.
• We do not use your data for advertising, and we do not build profiles of you for marketing purposes.

Under the EU and UK GDPR, each piece of processing needs a legal basis. Ours are:

• Performance of a contract — when you book a call, processing your booking details is necessary to deliver that call.
• Legitimate interests — running and securing the site, understanding aggregate usage, and improving the pages. We have assessed that this does not override your rights, given we collect no identifiers beyond transient logs.
• Consent — the light/dark theme preference, which is stored locally and can be cleared at any time.

We do not sell or rent personal data, and we have never done so. We do not share it with advertisers or data brokers.

We share personal data only with the two processors named in section 05, and only to the extent needed to run the feature you used. Both are bound by contract to protect it and to use it only on our instructions.

We will disclose data if we are legally required to — for example, in response to a valid court order — and we will tell you unless the law forbids us from doing so.

Leaderboard entries are kept while they remain on the leaderboard, so your score can keep improving. You can ask us to delete your entry at any time.

Booking details are kept for as long as needed to run the engagement, plus a reasonable period afterwards for record-keeping, after which they are deleted.

Server logs are rotated and deleted within 30 days.

If you are in the EU, UK, or Switzerland, you have the following rights over your personal data, and we will respond free of charge within one month:

• Access — get a copy of the data we hold about you.
• Rectification — have anything inaccurate corrected.
• Erasure — have your data deleted (“the right to be forgotten”).
• Restriction — limit how we use your data while a dispute is resolved.
• Portability — receive your data in a machine-readable format.
• Object — object to processing based on legitimate interests, and object to direct marketing at any time.
• Withdraw consent — for anything done on consent, without affecting what we did before.
• Complain — to your local data protection authority. We would rather you email us first, but that is not a prerequisite.
• To exercise any of these, email [email protected]. If you ask us to delete your leaderboard entry, we will remove it along with the associated score.

If you are a California resident, the CCPA/CPRA gives you the following rights. To be transparent about it: we do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use or disclose sensitive personal information — so the opt-out provisions that many policies need are not applicable here.

• Know — request the categories and specific pieces of personal information we collect about you, and the sources and purposes.
• Delete — request deletion of information we have collected from you.
• Correct — request correction of inaccurate personal information.
• Opt out of sale or sharing — available as an opt-out of both, which we honour on request even though we do not currently sell or share.
• Limit use of sensitive personal information — honoured on request.
• Non-discrimination — we never deny you a service, charge a different price, or provide a different level of service because you exercised a right.

We use HTTPS in transit and access controls on our systems, and we take reasonable steps to protect your data. No method of transmission or storage is perfectly secure, so we cannot promise absolute security — but a breach is not something we would sit on.

This site is a business-to-business service and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has submitted data, email us and we will delete it.

We may update this policy as the site or the law changes. The “Last updated” date at the top always reflects the current version, and material changes will be called out on the site.