Privacy Policy

Last reviewed: 23 October 2026

About this notice

TW Farms is the public-facing creator and community brand used on this website. Where personal data is processed through the company-operated website, business enquiries, creator services or technology activities, TW Farms Technologies Ltd (Company No. 17496422, registered in England and Wales) acts as the data controller. Privacy enquiries can be sent to [email protected]. TW and SADIE are public project identities; family privacy is explained in Digital Persons & Family Privacy.

Why we process personal data

Depending on the situation, processing is carried out because it is necessary to provide or discuss a requested service, because there is a legitimate interest in operating, securing and improving the website and responding to correspondence, because the company must comply with a legal obligation, or because consent has been given where consent is the appropriate basis. Where legitimate interests are relied on, those interests include website security, responding to enquiries, maintaining business and creator records, preventing misuse and protecting legal rights.

Different activities can rely on different lawful bases. A request for a quotation or project discussion may be processed because it is necessary to take steps at your request before entering into a contract; ordinary correspondence and security logging may rely on legitimate interests; legal or accounting records may be retained where required by law.

Website delivery and security

The website is hosted through Cloudflare Pages. Delivering pages, media and public API responses involves technical information such as your IP address, requested URL, browser information and request time. Cloudflare may process error and security information for delivery, protection and troubleshooting. This is processing even where TW does not ask you to submit information.

Provider logging and retention depend on the service and account configuration; this notice does not promise that visits are anonymous or that no logs exist. See Cloudflare’s privacy policy.

Community accounts and discussions

Website accounts use Google Firebase Authentication for email/password and Google sign-in, verification emails, password resets and optional two-step verification. Google processes your account email, authentication credentials and security information; if you enroll a phone as a second factor, Google also processes that number. TW Farms does not store your password or second-factor code in its community database. Google sign-in requests basic identity information, not access to your Google Ads, mail or files.

Cloudflare D1 stores a separate community profile with a public display name, an account identifier, terms acceptance and discussion records. Verified members can post and reply; anyone can read published discussions. Your display name, comment text, posting times and helpful counts are public. Avoid posting private information. Reports are visible only through restricted moderator tools.

TW Farms uses Google sign-in information to authenticate your account. We do not publish your Google account email, sell Google account data, or use it for advertising or AI model training. Google and Cloudflare process the information needed to deliver authentication, hosting and the community service. We do not request Google Ads, Gmail, Drive or other unrelated Google account access. We may disclose information where required by law or needed to investigate abuse and protect users’ rights.

We use account information to provide the community service and security records to prevent misuse. Short-lived, hashed request identifiers help enforce rate limits; hashing does not make those records anonymous. Comments remain until you delete them, delete your community account or moderation removes them. In My account, you can change your display name, download your community profile and comments, or delete your account. Account deletion erases your own comment text and public name; replies written by other people can remain. A minimal provider identifier is retained as a revocation record to prevent immediate recreation with the same credential. Contact us for review of retained records or other privacy requests.

Firebase and Cloudflare operate internationally; website authentication and discussions should not be assumed to remain in Sweden or the UK. See Firebase’s privacy information and Cloudflare’s policy for their processing arrangements.

Email, permission requests and concerns

If you email [email protected], Google’s email service handles delivery and storage, and TW Farms / TW Farms Technologies Ltd receives your address, message and attachments. The information is used to respond, review requests and concerns, discuss potential work, administer agreed services and keep appropriate records of decisions or disputes.

Where necessary to investigate a content concern, relevant information may be shared with a contributor, rightsholder or adviser. Only information needed for the review should be shared. Please avoid sending sensitive personal information unless necessary; do not send private family archives or identity documents in an initial message.

Mini Forge interest registrations

If you register your interest in Mini Forge, we store your name, email address, optional studio or company, what you would use Mini Forge for, any optional note, and when you gave consent. The details are held in Cloudflare D1. We use them only to contact you about Mini Forge, such as when places open, and to understand demand. They are not sold or shared for marketing. We keep them until 12 months after Mini Forge opens publicly, or until you ask us to remove them, whichever is sooner. To remove your details, email [email protected].

YouTube and video features

The latest-videos feature requests a feed through the TW Farms website. It stores a small cache of public video details and a fetch time in your browser’s localStorage so previously loaded cards can remain useful. It is not a viewing-history or advertising profile. See Cookies & Device Storage for the cache’s lifetime and controls.

YouTube thumbnails load from YouTube image servers. Map-tour pages also use YouTube’s privacy-enhanced player at youtube-nocookie.com. A player can make requests when it loads, before you press play; “privacy-enhanced” does not mean no data is processed. Playback and interactions may involve cookies or similar storage under Google’s policies. The current page does not provide a separate pre-load consent gate.

SADIE’s current introduction is a video served by this website, rather than a YouTube player. Delivery still involves hosting requests. See Google’s privacy policy for Google services.

Creator resources and external services

GHP Farmer’s AutoDrive Academy and course files are hosted by TW Farms. Selecting a GHP video opens YouTube. Other external links include Discord, Twitch, Facebook, merchandise and support/payment services. Those sites process visits under their own policies; a normal external link does not by itself embed that service here.

Google Fonts

The site currently loads fonts through Google Fonts. Your browser contacts Google’s font services to request font styles and files, which exposes connection information such as an IP address. A connection can involve personal-data processing even without an advertising cookie.

Analytics and advertising

The current website code does not load Google Analytics or a dedicated visitor-analytics script. It contains a Google AdSense account-verification meta tag, but no active AdSense JavaScript loader or ad units. This does not exclude technical hosting/security records. Any future analytics or advertising introduction should be accompanied by updated information and any required consent controls.

Private account logos

You may optionally upload a PNG, JPG or WebP logo up to 2 MB in My account. Your browser fits the whole image into a square of up to 512 pixels before upload. Cloudflare R2 stores the image privately and D1 links its dimensions, size and storage reference to your community profile. The image is available through your authenticated account and is not published beside comments. You can replace or remove it. Account deletion removes the association and requests storage cleanup; if storage is temporarily unavailable, cleanup must be retried before deletion completes.

Reply notifications

When another member replies to your comment, we store a private notification linked to your community profile and whether you have read it. If you opt in to reply emails in My account, we also store your verified account email and delivery preference. Email delivery uses Cloudflare when enabled; the message links back to the reply and includes an unsubscribe option. Email notifications are optional and can be switched off in My account. Your address is never shown in public comments or shared with other members. Account deletion removes your notification preferences and related notification records. Delivery attempts and non-personal send totals help prevent duplicate messages and control sending limits.

Retention and processing locations

Correspondence is kept for as long as reasonably needed to handle the enquiry, document decisions and address related disputes or obligations. There is no fixed retention period stated here. Technical records are subject to provider arrangements and operational needs. The browser cache has separate behaviour described in the storage policy.

Cloudflare, Google and other external services operate internationally and may process information outside the UK. Their policies describe their processing arrangements. Following a link or using an embed brings the relevant provider’s practices into scope; it should not be assumed that all processing stays in the UK.

Your choices and rights

You can clear site storage, restrict third-party requests through browser controls, or avoid opening optional external panels. Browser controls can affect how the site works; not pressing play does not prevent every request from an already-loaded player.

Where applicable, UK data-protection law provides rights including access, correction, erasure, restriction, objection and portability. Rights depend on the circumstances and on the lawful basis being used. Contact [email protected] to raise a request or concern with TW Farms Technologies Ltd. You can also complain to the Information Commissioner’s Office.

See Cookies & Device Storage, Copyright & Content Concerns and Terms & Disclaimer.