Slay / Privacy policy

Your details, treated with care.

Last updated: 13 October 2026

Slay is Raef’s independent software studio, based in Melbourne, Australia. This policy explains how I handle personal information when you visit slay.com.au, make an enquiry or discuss working with me.

What I collect

The contact form requires your name, business or organisation, email address, phone number, project description and an indicative budget. You can select “Let’s discuss it” if you haven’t settled a budget. If you prefer to make a general enquiry without completing the form, you can email or call me and share the information you choose.

The website’s hosting and security services also process technical information such as your IP address, browser, requested pages and the time of a request. This helps deliver the site, diagnose problems and protect it from abuse.

Please describe your project without including patient records, passwords or other sensitive information. If a project needs that information, we can agree on an appropriate way to share and handle it separately.

Why I use it

I use your information to respond to enquiries, understand what you need, prepare estimates, provide agreed services and manage our working relationship. I may also use relevant records to meet legal obligations, resolve a dispute or protect the website and the people using it.

I don’t sell personal information or add you to a marketing list because you submitted an enquiry. You can browse without providing contact details, and you can choose to make a general enquiry without identifying yourself. I will need a way to contact you if you would like a reply.

Where your enquiry goes

The published website is configured to use Cloudflare for hosting, request handling and enquiry storage, and Google for email delivery to [email protected]. Enquiry details may be held in the website’s database and in email correspondence. Access is limited to the people and service providers who need it to carry out the purposes described here.

If another specialist needs information about your project, I will discuss that with you and limit what is shared. Information may also be disclosed where required or authorised by law.

Processing outside Australia

Cloudflare and Google operate internationally. Information may be processed outside Australia, including in the United States and other countries where they operate infrastructure or support services. This website does not make an Australian-only data storage promise. Hosting and data sovereignty requirements for your own application are agreed separately.

For more about these providers’ processing locations and practices, see Cloudflare’s privacy policy and Google’s privacy policy.

Cookies, animation and AI

This version of the site has no advertising trackers or analytics cookies. The character and its animation run in your browser. Your wardrobe choice is saved in your browser’s session storage for the current tab. Reset clears that preference. Share links contain only the predefined look, expression and line you select; they do not include your contact form or conversation content. The site never requests your camera, and does not send your form submission to an AI model.

When usage measurement is enabled, the website records daily totals of page views, share-button interactions, arrivals through character share links and contact-form starts, counting each kind of event at most once per page load. These totals contain no visitor identifiers, IP addresses, page URLs, referrers, outfit choices or form contents. They don’t identify unique visitors or confirm that a shared link was sent. The browser sends no usage events when Global Privacy Control or Do Not Track is enabled. Enquiry totals can be counted separately from the enquiry records described above.

The website chat is an AI assistant provided by Bludge. Messages you type in the chat, and any contact details you give it, are processed by Bludge and its AI provider (Google Cloud, in the United States) to answer you and pass your enquiry to me.

“Talk to me” starts a spoken conversation with the same assistant, where your browser supports it; otherwise it takes you to the contact section, where you can start the chat, call or email. Your browser asks for the microphone only after you press it, and the conversation ends when you press “End the conversation” or leave the page. While it is open, your speech is streamed to Bludge, transcribed by Deepgram and answered by Google’s Gemini model. The replies are in a synthetic voice, not mine, and the cartoon’s mouth movements are worked out in your browser from the reply audio. Bludge does not record the audio. It keeps a transcript of the conversation, and the answers you give about your project, so I can read them and follow up; these are deleted after Bludge’s retention period. Please don’t share sensitive information in the conversation.

The form uses a salted, changing hash of the network address to limit repeated submissions. Its rate-limit records expire after an hour and are cleared during subsequent form requests. The enquiry record does not include the raw IP address; hosting providers may maintain their own security logs.

Security and retention

I use access restrictions and the security features of the hosting and email services to protect enquiry information. No online service can guarantee absolute security.

I keep information for as long as it is needed to respond to your enquiry, deliver services, manage the relationship and meet any applicable record-keeping obligations. When it is no longer needed, it should be deleted or de-identified. Copies in backups may remain until those backups expire.

Access, correction and deletion

You can ask what information I hold about you, request a correction or ask for deletion by emailing [email protected]. I may need to confirm your identity before acting. If I need to retain a record, or cannot meet your request, I will explain why.

Questions or complaints

Contact me at [email protected] or 0402 884 406. Please explain your concern and how you would like it resolved. I aim to respond to privacy complaints within 30 days.

If you are not satisfied with my response, you can contact the Office of the Australian Information Commissioner for information about whether it can consider your complaint.

Changes to this policy

I will update this page when the site’s features or information-handling practices change. The date at the top identifies the latest version.