Privacy & Cookies

Plain language, no legal theatre. Last updated June 2026.

01 Who we are

sidestudio is an independent brand, software and operations studio based in Jakarta, Indonesia, operating since 2022. We are the data controller for this website. Contact: hello@sidestudio.id · WhatsApp +62 816 556 595. We reply within 24 hours.

02 Cookies & tracking

No tracking cookies. No analytics. This site runs no Google Analytics, no pixels, no advertising or behavioural trackers.
What we store on your device: only small functional preferences in your browser’s local storage — the language you chose (ss_lang) and whether you’ve seen the cookie notice (ss_cookie_ack). These never leave your device and identify nobody.
Fonts are self-hosted. We serve every font from our own server, so no font request is sent to Google and no data is shared with a third party to display this site.

03 Data we process

When you contact us (email, WhatsApp, a brief or questionnaire), we process what you send — name, contact details and project information — solely to reply and run the engagement.
Server logs. Our host keeps standard technical logs (IP address, timestamp, page requested) to operate and secure the site. These are kept briefly and not used to profile you.
Your business data (sales, inventory, customers) lives in your systems on your accounts. We access it only to build and support what you hired us for.

04 Legal basis & retention

Legal basis (GDPR Art. 6): performance of a contract (running your engagement) and our legitimate interest in replying to enquiries and keeping the site secure.
Retention: enquiry and project data is kept only as long as needed for the engagement and our records, then deleted. One email is enough to have your data deleted sooner.

05 Your rights

If you are in the EU/EEA or UK, you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent at any time.
Exercise any of these by emailing hello@sidestudio.id — no forms, no fees.
You also have the right to lodge a complaint with your local data protection supervisory authority.

06 International transfers & EU clients

We operate from Indonesia and serve clients worldwide. Where we process the personal data of people in the EU/EEA, we rely on appropriate safeguards and sign a data processing agreement (DPA) with EU clients before a build starts.
For project builds, infrastructure (hosting, database) is created on accounts and in regions you choose — you stay in control of where data lives.

07 The spirit of it

We run restaurants, a bakery and a production kitchen of our own. We wrote this the way we’d want to read it as owners: short, honest, and with the exits clearly marked. If anything here is unclear, ask — you’ll get a straight answer in writing.