Privacy Policy
Last updated: 2 September 2026
Data Controller
Bowerbird Studio Ltd is the data controller for this website. Unicorn Status is a trading name of that company.
Registered in England and Wales, company number 17073237. Registered office: 49 Aylsham Drive, Ickenham, Uxbridge UB10 8TL.
Contact us at george@unicorn-status.com.
Data We Collect
If you log in: a single httpOnly authentication cookie ("unicorn-auth"). Access today is by a shared passphrase, so there is no account and no profile behind it. If we move to a proper sign-in later this section changes with it.
If you fill in a proposal or planning page: your name and contact details, and the answers you give us about your company. Those answers may describe other people at your organisation, such as founders or team members you want on a card.
If you just visit: we use Vercel Analytics, which counts page views without cookies and without building a profile of you. We do not use tracking pixels or fingerprinting, and we do not run advertising trackers.
Purpose
The authentication cookie maintains your session and grants access to restricted areas of the site. It is a strictly necessary cookie.
Information you give us on a proposal or planning page is used to design and produce your card set, to quote for it, and to talk to you about the work. We do not sell it and we do not use it to build marketing lists for anyone else.
Retention
The authentication cookie expires after 30 days, at which point you will need to authenticate again.
Information from a proposal or planning page is kept while we are in conversation with you about the work, and for as long as we need it to fulfil an order and meet our accounting obligations. You can ask us to delete it at any point, and we will unless we are required to keep a record.
Your Rights
Under the UK GDPR you have the right to access your personal data, correct it, have it erased, restrict how we use it, object to us using it, and receive a copy in a portable form. Email george@unicorn-status.com and we will answer.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you came to us first, but you do not have to.
Who Else Processes Your Data
We do not sell your data or share it for anyone else's marketing. We do rely on service providers to run the business, and they process data on our instructions:
- Vercel, for hosting this site and for page view analytics
- Supabase, for the database and for files you upload to us
- Google, for the AI models used to draft card content and artwork
- withoutbg, which cuts the background out of images you send us
- Microsoft, for our email
- Stripe, if and when you pay us
Some of these process data outside the UK. Where they do, the transfer is covered by the safeguards in their own data processing terms.
If someone else named you
A company planning a card set tells us about the people in it, which means we may hold your name and a line about what you do without you ever having filled anything in. You have the same rights over that as you would over anything you gave us yourself. Email us and we will tell you what we hold, correct it, or remove you from the set.
Still to come on this page
Two things are being written and are not here yet: the specific lawful basis we rely on for each kind of data, and a retention period for each with a reason attached rather than the general statement above. Our ICO registration was submitted on 2 September 2026 and the number will be published here once it is issued.
Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date.