Privacy Policy

Who We Are

Yellow Sparks is a software portfolio and development studio registered in England and Wales. We build websites, browser extensions, desktop applications, cloud marketplace solutions, APIs (application programming interfaces), and Discord bots.

If you have questions about this policy, contact us at privacy@yellowsparks.co.uk.

What Information We Collect

We collect only the information necessary to operate our services:

• Contact form submissions (name, email address, message)
• Basic analytics such as page views and referrer data (no personal identifiers)
• API usage metadata such as endpoint calls and response times, but never payload content

How We Use Your Information

We use the information we collect to respond to your enquiries, improve our products, and monitor service health. We do not sell, rent, or share your personal data with third parties for marketing purposes.

Cookies

Our main portfolio site uses a single functional cookie to remember your cookie consent preference. No tracking or advertising cookies are used. Individual products may use session cookies for functionality only.

Websites

Our websites collect no personal data beyond what you voluntarily submit through contact or enquiry forms. We may use anonymised analytics (such as page views and referrer data) to understand how our sites are used. No personally identifiable information is collected as part of this process.

Chrome Extensions

Our Chrome extensions are designed with a minimal data principle. Extensions do not collect, transmit, or store personal information unless explicitly stated in the individual extension's description. Any permissions requested are limited to what is strictly necessary for the extension to function. We do not use extension permissions to track browsing activity.

Microsoft Store Apps

Applications published on the Microsoft Store operate under Microsoft's platform privacy framework. Our apps do not collect personal data beyond what is necessary for core functionality. Any diagnostic or crash data is collected anonymously and used solely to improve app stability. We do not share this data with third parties.

Azure Marketplace Solutions

Solutions listed on the Azure Marketplace are subject to both Microsoft's platform policies and our own data handling practices. These solutions may collect usage telemetry such as feature usage counts and error logs for the purpose of service monitoring and improvement. No personally identifiable information is included in this telemetry unless you explicitly provide it during configuration or support.

APIs

Our APIs collect request metadata including endpoint, timestamp, and response status for the purpose of rate limiting, abuse prevention, and performance monitoring. We do not log or store request payloads or response bodies. API keys are treated as confidential credentials and are not shared or sold.

Discord Bots

Our Discord bots process messages and commands only in the context of their intended functionality. Bots do not store message content beyond what is required for immediate command processing. Server configuration settings may be stored to enable persistent bot behaviour. We do not sell or share any Discord data with third parties.

Data Retention

Contact form submissions are retained for up to 12 months and then deleted. Aggregated analytics data is retained indefinitely in anonymised form. API usage logs are retained for up to 90 days.

Your Rights Under UK GDPR

GDPR stands for General Data Protection Regulation. Under the UK GDPR you have the right to access, correct, or delete your personal data. You can also object to or restrict how we process it. To exercise any of these rights, email us at privacy@yellowsparks.com and we will respond within 30 days.

Third-Party Services

Some of our products integrate with third-party platforms such as Microsoft Azure, Google Chrome Web Store, Discord, and the Microsoft Store. Each of these platforms has its own privacy policy which governs data they collect independently of Yellow Sparks.

Security

We apply industry-standard security practices including HTTPS (hypertext transfer protocol secure), encrypted storage, and access controls. No system is completely secure, but we take reasonable precautions to protect your data.

Changes to This Policy

We may update this policy from time to time. We will post the revised version on this page with an updated date. Continued use of our services after changes constitutes your acceptance of the updated policy.