v6 · updated 2026-10-10 — earlier versions live in this site’s public git history
Mashq Studio counts — it does not track. Using the studio records anonymous counters only: an event name and a timestamp, nothing else (e.g. "editor opened", "file exported", "order pane opened"). No IP addresses, no device identifiers, no tracking cookies, no analytics scripts, and none of the text you type — your designs stay on your device unless you choose cloud sync.
When a browser error occurs we store a technical report (error message, line, and the browser's own description of itself: its name, version and system, which on some phones names the model) to fix it, kept 90 days — no identity, no design content. The same description is kept with a sign-in attempt and with an AI room preview. Your email is stored only when you type it yourself (newsletter, order tracking, account) and is used for that purpose alone.
Who processes what. Cloudflare (hosting, storage), Shopify (the store and checkout), Stripe (subscriptions), Spaceship/spacemail (email), Google (sign-in; and Gemini for the optional AI room preview — only the image you submit), and WhatsApp (Meta) for the messages you send us. Each receives only what its job needs; none receives your designs except Cloudflare, where they are stored.
Three cookies, each for its job only. mashq_sid keeps you signed in to the Studio when you choose to sign in (up to 30 days), mashq_pkce protects the sign-in while you are on Google's or the store's page (30 minutes), and mashq_learn_lang remembers your language through a Mashq Learn checkout (24 hours). None tracks you.
Mashq Learn. Your lesson scores, ticks and days in a row are kept in this browser only, unless you keep them with your account (below): otherwise we do not receive them, and clearing the browser's data erases them. Reading your sheet with the camera runs on your device; the picture is not recorded or sent. When you buy a plan, Stripe takes the payment, and we keep the email you paid with, your plan, its status and dates, the script you chose and Stripe's reference numbers, so that your code works, we can send it to that email again, and we can answer you. Your code is kept in your browser, so your plan opens without signing in. We ask no learner's name, and there are no learner accounts. If you write to us on WhatsApp, WhatsApp (Meta) carries the message. Plan records are kept as business and tax records for as long as UAE law requires. The terms: Mashq Learn terms.
Reminders on this device. If you turn on reminders on this device in the Daily practice panel, we keep the push address your browser gives us, the hour you chose, your time zone, the language and script of your path, and the dates of the last reminder and of the last day you wrote: no name, no email, nothing about your letters. We use them only to send one reminder a day at that hour, and none on a day you have already written. Turn off deletes the record at once; it is also deleted when your browser's push service says the address no longer works, or after 120 days unused. The calendar reminder sends us nothing: only the time you chose travels in its link.
Mashq Family. If you start or join a family, we keep which family your account belongs to and the name you chose for it (your address is kept only as a one-way code). The other members see that name, what you passed this week and the days you wrote, read from the progress you keep with your account; they never see your address or your letters. Leaving the family, or deleting your account, takes you out of it; the family ends when the person who started it ends it.
Progress on all your devices. If you are signed in to the Studio and keep your progress with your account, we keep with that account your lesson scores, your days of practice and their settings, and the letters of My best letters (the newest 120 days, each a small picture), so every device you sign in on shows them. Keep progress on this device only stops a device from sending. What is kept stays until you delete your account (it goes with it) or ask us at connect@mashq.ae; the account export file includes it.
Deletion, honestly. Deleting your account removes your cloud data immediately. A nightly backup copy — kept so a mistaken deletion is recoverable — survives until it is purged; write to connect@mashq.ae and the backup copy is removed as well. Order records tied to a physical purchase are retained as business records.
Questions: connect@mashq.ae · studio.mashq.ae
The data controller is 1click2open LLC (Sharjah Media City, UAE), which operates the MASHQ brand and Mashq Studio; payments for physical pieces appear on your statement as 1CLICK2OPEN LLC. Write to connect@mashq.ae to ask what is held about you, or to have it deleted.