Last updated 30 July 2026
The short version
We collect what you send us through the contact form, an email address if you subscribe, and technical information needed to keep the site working and secure. Analytics only runs if you accept it. We do not sell your data, and we do not share it for advertising.
Who we are
What Scene is a marketing and engineering studio operating from Mumbai and working with clients remotely worldwide. For anything on this page, including a request to see or delete your data, write to bezan@whatscene.in.
The contact form
When you submit the form on our contact page we store the name, email address, company, the services you ticked, any preferred date and time window, your message, and the topic and subject of the enquiry. Alongside it we store your IP address and browser user-agent string, which we use to rate-limit the endpoint and to investigate abuse.
We keep this for 90 days and then delete it automatically. The lawful basis is our legitimate interest in answering people who contact us about work. A copy is also emailed to us so we can reply.
The newsletter
If you subscribe we store your email address, which page you subscribed from, and the same IP and user-agent pair, for the same anti-abuse reason. We keep it until you unsubscribe, which you can do by replying to any email or writing to the address above.
Error reports
When something breaks in your browser we record the error message, the technical stack trace, the page URL, your user-agent and your IP address, so we can find and fix the fault. These records are deleted automatically after 90 days. We do not attach your name or email to them.
Analytics, and the cookie banner
Analytics is off until you press Accept. Nothing analytics-related loads before that, which is why the banner appears before any measurement happens rather than after. If you accept, Firebase Analytics (Google Analytics) records page views and a small number of actions such as submitting the contact form or opening a demo, and sets its own cookies to do so.
Your choice is stored in your browser under the key ws-analytics-consent. It never leaves your device and is not sent to us. Clearing your browser storage resets the choice and the banner will ask again. If you decline, we simply do not measure your visit.
If you have a client account
Clients with a dashboard login have an account holding an email address, display name, optional company name and contact details, plus the working records of the engagement: requests you raise, files we deliver, invoices, and messages. Signing in sets a secure session cookie named __session, which is required for the dashboard to work and is not used for tracking.
Administrative actions on accounts and invoices are written to an internal audit log. We keep account and billing records for as long as the relationship lasts and afterwards for as long as tax and accounting rules require.
Who else processes it
We keep the number of third parties deliberately small. Google (Firebase and Google Cloud) hosts the site, database, file storage and authentication, and provides analytics if you accept it. Resend delivers our transactional email. Both act on our instructions. Data may be processed outside your country, including in the United States and the EU.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to bezan@whatscene.in and we will respond within 30 days. If you are in the UK or EU you also have the right to complain to your data protection authority, and in India to the Data Protection Board.
Security
The site is HTTPS only, with strict transport security and a set of browser protection headers. Dashboard access is verified at three layers, and staff actions on client data are logged. If you believe you have found a vulnerability, please report it using the details in our security.txt.
Changes
If we change what we collect we will update this page and the date at the top. Material changes will be noted here rather than made quietly.
This page describes our actual practice and is written to be accurate rather than to sound reassuring. It is not legal advice, and it has not yet been reviewed by a lawyer.