Privacy Policy

The short version

We collect only what we need to run our websites, software and games.
We do not sell your personal information for money, and we do not send your email address to advertising partners.
We email you only about the topics you picked, and every email has an unsubscribe link.
Analytics and advertising cookies stay off until you choose them. If you allow advertising cookies, Google, Meta and other advertising partners can use them to measure our ads and show you ads for our products on other sites. You can say no and still use everything.
If you use CabinetWeave, your shop's designs, quotes and customer information belong to you. We use them to run the service for you. We use them to train AI models only if you opt in.
If you buy one of our games on Steam, itch.io or another store, the store handles your payment and we see only what the store gives us.

Who we are

MeridianFox, LLC is a Utah company. We make CabinetWeave, software for cabinet shops, and games under the name MeridianFox Studios. This policy covers meridianfox.com, cabinetweave.com, meridianfoxstudios.com, the CabinetWeave software and our games. Steam, itch.io and other stores have their own privacy policies for what they collect from you. Questions about this one go to privacy@meridianfox.com.

What we collect and why

On our websites

Email signup: your email address, the topics you chose (CabinetWeave, games or both) and when you signed up. We use it to send the updates you picked.
Founding Shop beta application: what you enter in the application form, such as your contact details and information about your shop. We use it to decide who joins the beta and to contact you about it.
Contact form: your name, email address, topic and message. We use it to reply.
Visit statistics: Google Analytics counts visits (pages viewed, approximate location, device and browser type) using cookies, once you accept analytics cookies.
Advertising: if you accept advertising cookies, Google and Meta tags on the sites where we run ads collect information about your visit: pages viewed, whether you signed up or applied, device and browser type, IP address and cookie identifiers. They use it to measure our ads and to show ads for our products to people who visited our sites and people with similar interests. We do not send them your email address or what you type into our forms.
Email activity: our email service, Brevo, may record whether you open an email or click a link, so we can see what is useful.
Bot check and hosting: Cloudflare Turnstile looks at signals from your browser to tell people from bots, and Cloudflare, which hosts the sites, processes IP addresses to deliver pages and block abuse.

If you use CabinetWeave

Account and billing: your name, email address, shop name and password (stored in protected form). Payments go through a payment processor, and we do not store your full card number. If you apply for the beta, we also keep what you tell us in the application.
Your shop's content: designs, drawings, quotes, price lists, cut lists, files you back up, and any customer names, addresses or contact details you enter. We use this only to run CabinetWeave for you: to store, back up, sync and show it. It is yours. We do not sell it or use it for advertising. We use it to train AI models only if you opt in, which is a separate choice you can turn off at any time. We look at it only to fix a problem you ask us about, to keep the service secure or to meet a legal requirement.
Technical information: the details the app needs to work, such as app version, license status and crash reports.
Support: the messages and files you send us.

If you play our games

On Steam: Valve gives developers limited information through its developer tools: at minimum whether you own the game, and, depending on the Steam features a game uses, things like achievements, leaderboard standing and in-game progress. Valve says it does not share your real name or email address this way. Anything on your public Steam profile can be seen by us.
On itch.io and other stores: we see only what each store's rules give us, such as sales counts and any information a store passes to developers. If we ever sell a game directly from our own sites, a payment provider acting as the seller of record handles your payment, and we receive your email address, country and order details.
In the game: a game may keep save files on your device or in the store's cloud. If a game collects more than that, such as crash reports, analytics, accounts or online play, its store page and in-game settings will say so, and we will update this policy.

How we use your information

We use it to run and support our products, to answer you, to send the updates you chose, to keep our systems secure and prevent abuse, to understand in aggregate how our sites are used, to measure and run our advertising if you allow advertising cookies, and to follow the law. We do not use it to make automated decisions about you.

Service providers that help us run things, under agreements that limit how they use it: Cloudflare (hosting, security, bot checks), Google (website analytics and our work email), Brevo (email lists and sending), a payment processor, and the cloud hosting and database providers behind CabinetWeave. If a CabinetWeave feature uses an outside AI provider to process your content, we send only what that feature needs, and our agreements with providers do not let them train on it.
The stores you buy from, such as Steam and itch.io.
Advertising partners, only if you allow advertising cookies: Google and Meta. They receive information about your visit and use it as independent companies under their own privacy policies (Google, Meta).
Authorities, when the law requires it or to protect people's safety or rights.
A buyer of the company, if MeridianFox is ever sold. We would tell you, and this policy would keep applying.

We do not sell personal information for money. If you allow advertising cookies, the information they collect goes to Google and Meta for advertising. Some state laws call this a sale or sharing for targeted advertising. You can opt out at any time (see Your choices and rights).

Where it is processed

In the United States. If you are elsewhere, your information is transferred here. For transfers from the EU and UK we rely on the safeguards our providers offer, such as standard contractual clauses.

How long we keep it

Email list: until you unsubscribe. We then keep only a note that you opted out, so we do not email you again.
Contact messages: 2 years.
Beta applications: as long as we need them to run the beta and follow up with applicants. You can ask us to delete yours sooner.
CabinetWeave: while your account is active. If you cancel, you keep read-only access for 90 days and can export your data. After that we delete it from our active systems, or sooner if you ask, unless the law requires us to keep something. Copies in backups are deleted on our normal backup cycle, within 90 days after that. Files stored only on your own computer are yours, and we do not delete them.
Advertising and analytics data: Google and Meta keep the information their cookies collect under their own policies.
Records the law requires, such as invoices and tax records: as long as the law says.

Your choices and rights

Unsubscribe with the link in any email.
Cookies and advertising: choose Analytics and Advertising separately in the cookie banner. Both are off until you choose. Change your choice at any time with the Your privacy choices link at the bottom of every page. Declining does not stop you using our sites.
Opt-out signals: if your browser sends a Global Privacy Control signal, we treat it as a choice to turn advertising cookies off.
Ask us to show you, correct, delete or export your information, or to stop using it in a way you object to. Email privacy@meridianfox.com. We may need to confirm it is you, and we aim to reply within 30 days.
US residents: several states give residents rights over their data, including the right to opt out of targeted advertising and of the sale or sharing of personal information. We apply them to everyone. Use the Your privacy choices link or send a Global Privacy Control signal and we will stop advertising cookies. You can also opt out of interest-based ads from many companies at optout.aboutads.info.
EU and UK residents: we rely on your consent for the email list, for analytics cookies and for advertising cookies, on our contract with you for accounts and CabinetWeave, and on our legitimate interest in security. You can complain to your local data protection authority.

Cookies and tracking

Our sites use two kinds of optional cookies, and both are off until you choose them. Analytics cookies from Google Analytics tell visits apart and count them. Advertising cookies and similar tags from Google and Meta measure our ads and show you ads for our products on other sites. We load these tags only after you accept them. You can change either choice at any time with the Your privacy choices link at the bottom of any page. Declining does not stop you using our sites. You can also block cookies in your browser or use Google's opt-out add-on. If we add other advertising partners, we will list them here first.

Security

We use HTTPS, limit who can reach your information and choose providers with strong security practices. No system is perfectly secure. If a breach affects you, we will tell you as the law requires.

Children

Our sites and products are not directed to children under 13, and we do not knowingly collect their information. We do not direct our advertising to children. Steam also requires its users to be 13 or older. If you think a child has given us information, email us and we will delete it.

Changes

When we change this policy we will update the date above. For material changes we will email our account holders and subscribers or post a notice on our sites.

Contact

MeridianFox, LLC, Utah, USA. Privacy questions and requests: privacy@meridianfox.com. Everything else: hello@meridianfox.com.