A signpost, not a filing cabinet.

Who we are

Carpe Vitam Tuam (Latin: seize your life) is the umbrella site for a small family of apps. This website is published by Totté Studios Ltd, a company registered in England and Wales, company number 17369157. For this website, Totté Studios Ltd is the data controller under the UK GDPR, and the contact for anything on this page is [email protected].

This policy is written to describe what this site actually does rather than to cover every theoretical case with boilerplate — if a practice isn't described here, it's because the site doesn't do it. It is published in English only; the footer of every language version of the site links to this page.

Which policy covers you

This page covers the carpevitamtuam.com website and the mail you send to [email protected]. It does not describe what any app does with your data. Each app is its own product with its own permissions, its own storage, and its own privacy policy — and that policy, not this one, is the authority on it.

Worth saying plainly, because this address travels: [email protected] is the published privacy contact for Seize Light, so it appears in that app's policy and on the Settings screen inside it. Data-protection mail about an app therefore lands at this domain. That's deliberate — it reaches a real person either way — but the answer comes from the app's policy:

• Seize Light (Carpe Lucem) — carpe-lucem.com/privacy.html
• Rota Vitae (Wheel of Life) — rota-vitae.com/privacy.html
• Seize the Week (Carpe Septimanam) — carpeseptimanam.com/privacy.html
• Seize the Day (Carpe Diem) — seize-day.com/privacy.html
• Space Maze Arcade — space-maze.com/privacy.html

If you aren't sure which applies, write to us anyway. A request doesn't lose its place in the queue for arriving at the wrong door — we'll answer it, tell you which policy governs it, and route it. Requests about an app are handled under that app's policy; requests about this website are handled under this one.

Because each app holds different things in different places, don't take this page's word for what an app stores. Where an app keeps everything on your device and in your own iCloud, there's no copy for anyone to hand back or erase, and no request to file — though an iCloud copy outlives the uninstall until you delete it yourself. Where an app uses analytics, leaderboards, or ad partners, its own policy sets out what those receive and how to opt out. See Deleting your data.

What this website touches

Here is everything, top to bottom. It is a short list because the site is a single static page with nothing behind it.

Analytics, and how to switch it off

The site uses Google Analytics 4 (property G-QXQ3929YGJ). The tag is loaded from googletagmanager.com and the measurements it takes are sent to Google at google-analytics.com and region1.google-analytics.com. It runs on every page of this site, including this one.

What it records is the ordinary shape of a visit: which pages were opened, roughly where in the world the request came from (derived from your IP address), which site referred you, and basic browser, device and language information. To tell a repeat visit from a new one it sets two cookies in your browser — _ga and _ga_QXQ3929YGJ — which last up to two years unless you clear them.

• It is not used for advertising. No advertising cookies are set on this site, and nothing here builds an ad profile of you.
• We see it as aggregate reporting — counts and trends. Nothing in it carries your name or your email, because the site never asks for either.
• Google states that Analytics 4 does not log or store IP addresses; it uses them to derive an approximate location and then discards them. Google processes this data under its own privacy policy.

Being straight about the gap: the tag loads with the page. This site shows no cookie banner, so nothing asks you before it runs. If you'd rather not be counted, any of these work and none of them break the site:

• Install Google's Analytics opt-out browser add-on, which stops the tag reporting anything, on every site you visit.
• Block or clear cookies for carpevitamtuam.com in your browser settings, or read the site in a private window.
• Use a browser or extension that blocks analytics scripts — the page is built to work without it, and its illustrations are drawn locally either way.

What this site doesn't load

Most of what a privacy policy usually has to explain simply isn't here, and that's easy to verify — the page is a single file you can read.

• No web fonts. The site uses the fonts already on your device (the system font stack). Nothing is fetched from a font service.
• No third-party embeds or widgets, and no images but our own except the analytics beacon. The favicon is written into the page as a data URI, the logo is inline SVG, the social preview image is served from this domain, and the illustrations on the landing page are drawn in your browser with canvas. The one image origin that isn't ours is google-analytics.com, which the analytics tag above may use to send its measurements. There is no embedded video, no social feed, no chat widget, no A/B testing tool, no heatmap, and no session recording.
• No ads on this website and no advertising pixels. The apps are free and some of them show ads; that happens inside the app, under the app's own policy, and has nothing to do with this site.
• One inert marker. The landing page carries a Meta (Facebook) domain-verification <meta> tag, which exists only to prove we own this domain to the studio's Meta account. It loads no script, sets no cookie, and sends nothing anywhere. There is no Meta pixel on this site.
• The file at /app-ads.txt is not about you. It's an industry authorised-sellers list that ad networks read to confirm who may sell advertising in the apps. It's a static text file, it does nothing in your browser, and it collects nothing.

This isn't only an intention. The site is served with a Content-Security-Policy that tells your browser to refuse scripts, styles, fonts, images and connections from anywhere other than this domain. The exceptions are the ones the analytics tag described above needs — its script from googletagmanager.com, connections to www.google-analytics.com and region1.google-analytics.com, and images from www.google-analytics.com — plus data: images, which is how the favicon above is embedded. If we ever added a third-party service, that header would have to change with it.

Hosting, and links away from here

The site is hosted on Cloudflare Pages and served over HTTPS. As with any request on the internet, your device's IP address is visible to the host in the moment of connecting, and Cloudflare handles it as our infrastructure provider under its own privacy policy. We don't run a server of our own behind this domain and we don't keep a visitor log.

Most of what this page does is send you somewhere else — to the App Store, to an app's own site, or to a policy like the ones linked above. Once you follow a link, you're on someone else's site under their policy. The site sets a strict-origin-when-cross-origin referrer policy, so where a destination is told anything about where you came from, it's told only carpevitamtuam.com — not which page you were reading.

Email, and how long we keep it

There is no form on this site. The Contact link opens your own email app, addressed to [email protected] — so the only personal data you could give this site is what you deliberately type into a message, plus the address you send it from.

• We use it to answer you, and for nothing else. It isn't sold, rented, or shared, and it isn't added to any marketing list.
• We keep the correspondence for as long as it takes to deal with your message, and for a reasonable period afterwards so there's a record of what was asked and what was answered.
• Ask us to delete it and we will — see Deleting your data.

Legal bases, and where data goes

Under the UK GDPR we have to say why we're allowed to process each thing. For this website:

• Delivering and securing the page (connection data) — our legitimate interest in running a site that works and stays up.
• Answering your mail — our legitimate interest in replying to someone who wrote to us; and where the message is a data-protection request, our legal obligation to deal with it.
• Analytics — our legitimate interest in knowing roughly how the site is used. This is the one part of the site that isn't strictly necessary to show you the page, which is why the opt-out under Analytics matters and is listed there.

Both of the companies involved — Google for analytics and Cloudflare for hosting — operate globally, so this data is processed outside the UK, including in the United States, under their own international transfer safeguards described in their privacy policies. We transfer nothing ourselves, because we hold nothing to transfer.

Children

This is a general-audience information page and it isn't directed at children under 13 (or the equivalent age where you live). It has no account to create and asks for nothing, so there's no profile for a child or anyone else to build here. A parent or guardian with a question can use the contact below.

Deleting your data

On the website side there is no account to close and no store of visitors, so for most people there is genuinely nothing held that needs deleting. Concretely, here is everything that exists and how each piece goes away:

• The analytics cookies — clear or block site data for carpevitamtuam.com in your browser, or use the opt-out add-on. That removes them from your device and stops any further counting. What was already recorded carries a random identifier from that cookie, never a name or an email, and once the cookie is gone there's nothing linking it back to you.
• Your Day/Night preference — clearing site data removes it. It never left your browser in the first place.
• Mail you've sent us — this is the one thing an actual person holds. Write to [email protected] and we'll delete the correspondence.

For an app, deletion happens where the data actually lives, and that app's policy is the authority on it. The four Carpe Vitam Tuam apps are built local-first: what you enter is held on your device, and where it syncs at all it syncs through your own private iCloud on Apple devices, which we cannot reach. In that arrangement, deleting the app removes what it stored on that device, and there is nothing held on our side to request, return, or erase — there is no self-serve deletion tool here, because there is no server-side copy for one to act on. Where an app syncs to iCloud, that copy is yours and survives the uninstall until you remove it yourself, which each app's policy explains. That is the shape of it, not the fine detail: several of these apps also use advertising partners, and some use app analytics or Apple and Google leaderboards, which is set out in their own policies along with how to opt out. Space Maze Arcade is a Totté Studios game rather than part of this family and differs more; read its policy for it. Start here:

• Seize Light — carpe-lucem.com/privacy.html
• Rota Vitae — rota-vitae.com/privacy.html
• Seize the Week — carpeseptimanam.com/privacy.html
• Seize the Day — seize-day.com/privacy.html
• Space Maze Arcade — space-maze.com/privacy.html

If you'd rather not work out which page applies, just ask us at [email protected] and say which app you mean. We'll tell you exactly what that app holds and how to remove it.

Your rights

If you're in the UK or the EEA, the UK GDPR and the EU GDPR give you rights over your personal data. They apply here in full, even though this website holds very little of it:

• Access — ask what personal data we hold about you, and get a copy of it.
• Rectification — have anything inaccurate corrected, or anything incomplete completed.
• Erasure — ask us to delete it. See Deleting your data for what that means in practice.
• Restriction — ask us to pause what we do with it while a question about it is being sorted out.
• Objection — object to processing we base on legitimate interests, including the analytics described above.
• Portability — receive the data you gave us in a common, machine-readable format, or have it sent on.

Where processing rests on your consent — which on this site it doesn't, but inside some of the apps it does, for personalised ads — you can withdraw that consent at any time, and each app's policy says where.

How to exercise them

One route, the same one printed everywhere else: email [email protected] and say what you want. There's no form to complete and no fee. We'll reply as quickly as we can, and in any case within the one month the UK GDPR allows. Because we hold no account, the only thing we can match a request against is the mail itself — so please write from the address you'd like us to look for, and tell us whether your request is about this website or about a specific app (see Which policy covers you).

Complaining to the regulator

If you think we've handled your data badly, you have the right to complain to a supervisory authority. Ours is the UK's Information Commissioner's Office (ICO) — ico.org.uk, which explains how to raise a concern. If you're in the EEA, you may complain to your own national data protection authority instead. We'd rather you told us first so we can put it right, but you are under no obligation to.

Changes to this policy

If this site starts doing something new — a form, a newsletter, a different analytics tool, anything at all that touches your data — we'll describe it here plainly and change the date at the top. This is the first version of this page, published because a domain that receives privacy mail should publish a privacy policy of its own.

Contact

Questions about your privacy, or about this policy? We read every message.