Privacy Policy

Last reviewed: 1 November 2026

About this notice

TW Farms is the public-facing creator and community brand used on this website. Where personal data is processed through the company-operated website, business enquiries, creator services or technology activities, TW Farms Technologies Ltd (Company No. 17496422, registered in England and Wales) acts as the data controller. Privacy enquiries can be sent to enquiries@twfarms.uk. TW and SADIE are public project identities; family privacy is explained in Digital Persons & Family Privacy.

Why we process personal data

Depending on the situation, processing is carried out because it is necessary to provide or discuss a requested service, because there is a legitimate interest in operating, securing and improving the website and responding to correspondence, because the company must comply with a legal obligation, or because consent has been given where consent is the appropriate basis. Where legitimate interests are relied on, those interests include website security, responding to enquiries, maintaining business and creator records, preventing misuse and protecting legal rights.

Different activities can rely on different lawful bases. A request for a quotation or project discussion may be processed because it is necessary to take steps at your request before entering into a contract; ordinary correspondence and security logging may rely on legitimate interests; legal or accounting records may be retained where required by law.

Website delivery and security

The website is hosted through Cloudflare Pages. Delivering pages, media and public API responses involves technical information such as your IP address, requested URL, browser information and request time. Cloudflare may process error and security information for delivery, protection and troubleshooting. This is processing even where TW does not ask you to submit information.

Provider logging and retention depend on the service and account configuration; this notice does not promise that visits are anonymous or that no logs exist. See Cloudflare’s privacy policy.

Community accounts and discussions

Website accounts are run by TW Farms on Cloudflare. You can sign in with Google sign-in (OAuth) — Google receives the sign-in request; TW Farms stores your Google account ID and email in its own Cloudflare database. Existing accounts can also sign in with an email address and password; TW Farms stores only a salted, hashed form of the password, never the password itself. If you turn on optional two-step verification, TW Farms stores an encrypted authenticator key so it can check your six-digit codes; codes themselves are not kept. Google sign-in requests basic identity information, not access to your Google Ads, mail or files.

Cloudflare D1 stores a separate community profile with a public display name, an account identifier, terms acceptance and discussion records. Verified members can post and reply; anyone can read published discussions. Your display name, comment text, posting times and helpful counts are public. Avoid posting private information. Reports are visible only through restricted moderator tools.

TW Farms uses Google sign-in information to authenticate your account. We do not publish your Google account email, sell Google account data, or use it for advertising or AI model training. Google and Cloudflare process the information needed to deliver authentication, hosting and the community service. We do not request Google Ads, Gmail, Drive or other unrelated Google account access. We may disclose information where required by law or needed to investigate abuse and protect users’ rights.

We use account information to provide the community service and security records to prevent misuse. Short-lived, hashed request identifiers help enforce rate limits; hashing does not make those records anonymous. Comments remain until you delete them, delete your community account or moderation removes them. In My account, you can change your display name, download your community profile and comments, or delete your account. Account deletion erases your own comment text and public name; replies written by other people can remain. Deleting your community account erases your profile, comments' content, Google link and two-step setup. Your website sign-in account (email) is kept because it may hold Mini Forge purchases. Email TW Farms (tw@twfarms.uk) to erase your whole account. Contact us for review of retained records or other privacy requests.

Google and Cloudflare operate internationally; website authentication and discussions should not be assumed to remain in Sweden or the UK. See Google’s privacy policy and Cloudflare’s policy for their processing arrangements.

Email, permission requests and concerns

If you email enquiries@twfarms.uk, Google’s email service handles delivery and storage, and TW Farms / TW Farms Technologies Ltd receives your address, message and attachments. The information is used to respond, review requests and concerns, discuss potential work, administer agreed services and keep appropriate records of decisions or disputes.

Where necessary to investigate a content concern, relevant information may be shared with a contributor, rightsholder or adviser. Only information needed for the review should be shared. Please avoid sending sensitive personal information unless necessary; do not send private family archives or identity documents in an initial message.

Mini Forge interest registrations

If you register your interest in Mini Forge, we store your name, email address, optional studio or company, what you would use Mini Forge for, any optional note, and when you gave consent. The details are held in Cloudflare D1. We use them only to contact you about Mini Forge, such as when places open, and to understand demand. They are not sold or shared for marketing. We keep them until 12 months after Mini Forge opens publicly, or until you ask us to remove them, whichever is sooner. To remove your details, email business@twfarms.uk.

Mini Forge studio

When you use the Mini Forge studio, TW Farms Technologies Ltd stores your account email, display name, the photos you upload, your chat with RILEY, the build brief you approve, the models generated for you, and your credit, order and subscription records. We use this information to provide the service you asked for (contract), to keep it secure, and to keep accounting records we are legally required to keep.

To do this we use these service providers: Cloudflare (hosting, D1 database and R2 file storage), Google (sign-in through Google sign-in (OAuth), when you choose it), Stripe (payments — card details go straight to Stripe and we never see your full card number), Hitem3D (turning your photo into a 3D model), DeepInfra and NVIDIA (the AI models behind RILEY’s photo review and chat), and Microsoft Azure (build workers that prepare the Blender, GLB and OpenUSD files). Each receives only what it needs to deliver Mini Forge and processes it under its own terms. Some of them operate outside the UK.

We do not sell your data, use it for advertising, or use your photos or models to train our own AI models. Your photos and models stay in your private account directory until you ask us to delete them or close your account. Order and payment records are kept for six years for tax purposes. To access, export or delete your Mini Forge data, email enquiries@twfarms.uk.

YouTube and video features

The latest-videos feature requests a feed through the TW Farms website. It stores a small cache of public video details and a fetch time in your browser’s localStorage so previously loaded cards can remain useful. It is not a viewing-history or advertising profile. See Cookies & Device Storage for the cache’s lifetime and controls.

YouTube thumbnails load from YouTube image servers. Map-tour pages also use YouTube’s privacy-enhanced player at youtube-nocookie.com. A player can make requests when it loads, before you press play; “privacy-enhanced” does not mean no data is processed. Playback and interactions may involve cookies or similar storage under Google’s policies. The current page does not provide a separate pre-load consent gate.

SADIE’s current introduction is a video served by this website, rather than a YouTube player. Delivery still involves hosting requests. See Google’s privacy policy for Google services.

Creator resources and external services

GHP Farmer’s AutoDrive Academy and course files are hosted by TW Farms. Selecting a GHP video opens YouTube. Other external links include Discord, Twitch, Facebook, merchandise and support/payment services. Those sites process visits under their own policies; a normal external link does not by itself embed that service here.

Google Fonts

The site currently loads fonts through Google Fonts. Your browser contacts Google’s font services to request font styles and files, which exposes connection information such as an IP address. A connection can involve personal-data processing even without an advertising cookie.

Analytics and advertising

The current website code does not load Google Analytics or a dedicated visitor-analytics script. It contains a Google AdSense account-verification meta tag. Optional Google Ads measurement only loads after you accept optional cookies in the site cookie banner; rejecting optional cookies keeps that tag off. Essential sign-in cookies are described on the Cookies page. This does not exclude technical hosting/security records.

Private account logos

You may optionally upload a PNG, JPG or WebP logo up to 2 MB in My account. Your browser fits the whole image into a square of up to 512 pixels before upload. Cloudflare R2 stores the image privately and D1 links its dimensions, size and storage reference to your community profile. The image is available through your authenticated account and is not published beside comments. You can replace or remove it. Account deletion removes the association and requests storage cleanup; if storage is temporarily unavailable, cleanup must be retried before deletion completes.

Reply notifications

When another member replies to your comment, we store a private notification linked to your community profile and whether you have read it. If you opt in to reply emails in My account, we also store your verified account email and delivery preference. Email delivery uses Cloudflare when enabled; the message links back to the reply and includes an unsubscribe option. Email notifications are optional and can be switched off in My account. Your address is never shown in public comments or shared with other members. Account deletion removes your notification preferences and related notification records. Delivery attempts and non-personal send totals help prevent duplicate messages and control sending limits.

Retention and processing locations

Correspondence is kept for as long as reasonably needed to handle the enquiry, document decisions and address related disputes or obligations. There is no fixed retention period stated here. Technical records are subject to provider arrangements and operational needs. The browser cache has separate behaviour described in the storage policy.

Cloudflare, Google and other external services operate internationally and may process information outside the UK. Their policies describe their processing arrangements. Following a link or using an embed brings the relevant provider’s practices into scope; it should not be assumed that all processing stays in the UK.

Your choices and rights

You can clear site storage, restrict third-party requests through browser controls, or avoid opening optional external panels. Browser controls can affect how the site works; not pressing play does not prevent every request from an already-loaded player.

Where applicable, UK data-protection law provides rights including access, correction, erasure, restriction, objection and portability. Rights depend on the circumstances and on the lawful basis being used. Contact enquiries@twfarms.uk to raise a request or concern with TW Farms Technologies Ltd. You can also complain to the Information Commissioner’s Office.

See Cookies & Device Storage, Copyright & Content Concerns and Terms & Disclaimer.