Information about browsing Northlane Growth, preparing a project brief and your privacy choices.
1. Scope of this policy
This Privacy Policy explains how information is handled when you visit the Northlane Growth website, view its content or use its project-brief tool. References to this website mean the pages on which this policy appears. The website presents services for mobile app businesses and game publishers; it is not an advertising platform, a mobile application or a client reporting portal.
This policy describes website activity. Work involving a client’s advertising accounts, app events, customer records or attribution tools requires a separate engagement and, where applicable, a data-processing agreement and appropriate notices to the people concerned. Merely visiting this website does not enrol you in such processing.
2. Information involved in your visit
- Connection and delivery information. A request to load a page or asset includes technical information such as an IP address, requested address, time, browser or user-agent information and, depending on your browser settings, a referring page. The hosting infrastructure receives the information needed to handle that request.
- Local brief information. The brief tool asks for a name, work email, company or studio, product type, service interest and a free-text description. In the current version these fields are processed in your browser, rather than submitted to the website.
- Information sent separately. If you independently send an email or otherwise start a business conversation, the recipient receives the information you choose to include, along with the normal message metadata. Preparing or copying a brief alone does not create that communication.
You can read the website without entering a name, email address or project details. Please do not put passwords, payment information, identification documents, sensitive personal information or identifiable customer datasets into a project brief.
3. How the local brief tool works
The tool formats the information you enter into a text draft. The Prepare a brief button does not send that draft, create an account, subscribe you to marketing or place it in a customer database. Required fields only determine whether a complete local draft can be prepared; you may leave the tool unused and continue browsing.
The website does not save the draft in cookies, local storage, session storage or a website-managed database. Browser autofill, page restoration, extensions or device backups may nevertheless retain information independently of the website. Refreshing or closing a tab is not a guarantee that every device-managed copy has been erased.
Choosing Copy brief asks your browser to write the draft to your clipboard. Your device’s clipboard history or synchronisation settings may keep a copy. Nothing is sent to the agency by copying. If you later paste the draft into email or another service, that is a separate action under your control.
Choosing Open email app passes the recipient, subject and prepared draft to your device’s configured email application. Review the message and choose Send there to deliver it. Opening the email application alone does not confirm delivery. The email provider may store a draft under its own settings.
The acknowledgement beside the privacy link confirms that you have read the notice. It is not consent to advertising, profiling, email marketing or the disclosure of your brief to third parties.
4. Purposes and legal grounds
Where the GDPR applies to personal information processed for this website, the relevant purpose and legal ground must be considered for each activity. The local brief text is not received by the agency merely because you type it into the page.
- Delivery, reliability and security: technical request information supports loading pages, diagnosing failures and detecting abuse. The relevant legitimate interests are operating a functioning website, protecting the service and preventing misuse, subject to the interests and rights of visitors.
- Answering a separate enquiry: if you send a business message, its contents may be used to understand the request and respond. Depending on the circumstances, this serves legitimate interests in business communication or steps you request before entering a contract with you.
- Legal obligations and claims: information may need to be handled to comply with a specific legal requirement or establish, exercise or defend a legal claim. Only information relevant to that purpose should be retained or disclosed.
Browsing is not treated as consent to optional tracking. If a future feature relies on consent, it must explain the specific purpose and provide a genuine choice before the relevant processing starts.
6. Hosting and service providers
Loading the website necessarily connects your browser to the hosting infrastructure for the address you visit. The hosting provider can receive connection information even when no form is used. Technical logs may be available to authorised hosting personnel and, depending on the service configuration, website administrators for delivery, troubleshooting and security.
For a deployment hosted on Vercel, Vercel provides the page and asset delivery infrastructure. Its published Privacy Notice explains its own processing, including certain website-traffic information. Where it handles customer data on a customer’s instructions, the applicable service agreement and data-processing terms govern that processing. This does not mean Vercel Web Analytics is enabled on this website.
Messages sent to info@northlandgrowthmobile.com are routed through Namecheap’s email-forwarding service to a Google Gmail inbox used to manage enquiries. Namecheap and Google process the message contents, attachments, sender and recipient addresses, and message metadata as needed for routing, storage, security and delivery. Their Namecheap Privacy Policy and Google Privacy Policy explain their respective practices.
The website code does not send local brief contents to a hosting API, CRM, advertising platform or generative-AI service. Email is sent only when you choose to send it from your email application.
7. When information may be disclosed
Technical information may be handled by service providers involved in website delivery, network operations and security. Separately received correspondence may be made available to people who need it to respond, to relevant communications providers or to professional advisers where necessary for a specific matter.
Information may also be disclosed where a valid legal obligation requires it, to respond to a lawful authority request, or where necessary and lawful to protect rights, investigate misuse or deal with a legal claim. Requests should be assessed for their legal basis and scope.
This website has no function that sells visitor information, shares it for cross-context behavioural advertising or makes project briefs public. A link to an external website does not give that website access to text you have entered into the local brief tool.
8. International processing
Website delivery and communications services can operate across more than one country. A visitor’s location does not, by itself, guarantee that all technical processing occurs in that country or exclusively in the European Economic Area.
Where a transfer is subject to GDPR restrictions, an appropriate transfer mechanism is required. Depending on the recipient and circumstances, this may be an applicable adequacy decision or contractual safeguards such as the European Commission’s standard contractual clauses, together with any measures required for that transfer. The mechanism must cover the particular recipient and transfer; safeguards must be assessed in that context.
Questions about a particular provider, processing location or applicable safeguards should identify the website address and the type of interaction so the relevant arrangement can be established.
9. Retention and deletion
- Local drafts: the website has no server-side copy or persistent draft store. A browser or device may retain autofill, session-restoration or clipboard copies under its own settings. You control those copies on your device.
- Technical requests and logs: retention depends on the hosting service, enabled logging features and any specific security incident. The relevant criteria are the period needed to deliver and troubleshoot the service, investigate the incident, meet a legal requirement or handle a relevant claim. The applicable service configuration and the duration of the specific operational need determine when those records are removed.
- Separate correspondence: if you send an enquiry, relevant correspondence may be kept while the matter is active and for a further period justified by follow-up, an applicable record-keeping obligation or a specific claim. The purpose and applicable law determine the period; sending an enquiry does not justify indefinite unrelated use.
Where information is no longer needed for its lawful purpose, it should be deleted or irreversibly anonymised. A lawful retention obligation or a relevant dispute may limit immediate deletion of particular records. Local drafts that were never received cannot be searched or erased from a server.
10. Security and your responsibilities
The website is designed to avoid collecting brief contents through a submission endpoint and to serve its interface resources locally. These choices reduce the number of systems involved in ordinary browsing, but no website, network or device can be guaranteed completely secure.
Use a trusted device and connection for business information. Keep access credentials and sensitive records out of free-text fields. Before sending anything through another channel, check the recipient and share only what is needed. Clipboard history, browser extensions and shared computers can expose a draft independently of this website.
If a suspected security issue concerns the website, describe the affected page and the problem through an available contact channel. Do not include unrelated personal records or attempt to access another person’s information to demonstrate the issue.
11. Your data-protection rights
Where applicable law grants them, you may request access to personal information, correction, deletion or restriction; object to processing based on legitimate interests; and obtain eligible information in a portable format. These rights depend on the processing and may have lawful limits. You may withdraw consent for processing based on consent, without affecting earlier lawful processing.
A request should identify the website and relevant interaction. Proportionate identity checks may be needed, but additional information should be limited to what is necessary. Under the GDPR, requests generally require a response within one month; a permitted extension must be explained within that period. Requests are generally free, subject to the GDPR’s limited exceptions.
The European Commission’s guide to individual rights provides further information. The brief tool is not a rights-request submission channel: generating a draft does not notify anyone.
12. Complaints and supervisory authorities
You may raise a privacy concern without giving up your right to contact a competent supervisory authority. Where the GDPR applies, you may complain to an authority in the Member State of your habitual residence, place of work or the alleged infringement. You do not have to complete a business enquiry first.
The European Data Protection Board’s authority directory lists EEA supervisory authorities and their contact information. Rights available under other applicable laws remain unaffected.
13. Children and sensitive information
The Northlane Growth website is directed to business decision-makers and professional teams, rather than children. A game illustration or a discussion of player acquisition is not an invitation for children to create an account, submit player data or provide personal information.
There is no child registration, game account or player-profiling feature on the website. If you believe information about a child or sensitive information has been sent separately, identify the communication through an available contact channel so the matter can be assessed. Do not include a second copy of the sensitive material unless it is specifically needed.
14. Automated decisions and marketing
The website does not score visitors, build advertising audiences or make decisions with legal or similarly significant effects about them. Local field validation and formatting a brief are interface functions, not an automated eligibility decision.
Using the brief tool does not subscribe you to a mailing list. Descriptions of campaign optimisation and attribution concern potential client services; they do not mean that those activities are being carried out on visitors to this website.
15. Updates and questions
The date at the beginning identifies the latest revision. Changes to website features, providers or processing practices should be reflected here. If a change requires new information or consent before processing starts, merely changing this page is not a substitute for that requirement.
For website enquiries or privacy requests, email info@northlandgrowthmobile.com. Contact details are also presented on the contact page. The local brief tool can help you organise a question, but it does not transmit a request or confirm receipt. Use an operational direct communication channel for a privacy request; do not assume a request has been delivered because a draft appeared on screen.