Policies

Last updated: 8th of August 2026

Mutt Mash is a product of SSH Creative Ltd. This policy covers all apps, add-ons and asset libraries published under the Mutt Mash name for third-party design platforms, including Canva and Adobe Express.

The short version

Most of what our apps do happens inside the host platform and involves no data leaving your account. Some apps have paid features unlocked with a licence key – checking that key is a request to our payment provider. Some apps can download optional asset libraries (such as 3D models or texture packs) from our hosting – which involves a request to our asset server. Those are the only times our apps talk to a server outside the host platform. We run no analytics, advertising, or tracking in any app.

1. Free apps (no payment, no libraries)

Many apps are free and run entirely within the host platform. They collect, store, and transmit no personal data. No accounts, analytics, cookies, or external requests. Content you create or import stays in your host-platform account, under that platform's privacy policy (Canva, Adobe).

2. Apps with paid features (licence keys)

Some apps offer premium features unlocked with a licence key bought on our site.

  • What we process. When you enter a licence key, the app sends it to our payment provider ([PROVIDER]) to confirm it is valid and active. The result is cached locally on your device.

  • Cards. We never receive or store card details – our payment provider acts as merchant of record and handles all payment data under their own policy ([PROVIDER PRIVACY LINK]).

  • Order data. We receive limited order information (your email, the product bought) to issue your key and provide support.

  • Your content is never sent to us.

3. Apps with asset libraries (media delivery) = Coming soon

Some apps let you browse and download optional asset libraries – for example 3D models, mockups, textures, or presets – that we host outside the platform.

  • What happens when you use a library. To show you a library, the app fetches a list (a manifest) and thumbnails from our asset hosting ([e.g. Cloudflare R2 via a delivery worker]). When you choose an asset, the app requests that specific file. For paid libraries, the request includes your licence key so our server can confirm you're entitled to it before returning a short-lived download link.

  • What we process. To deliver assets and prevent abuse, our asset server may process, in transit, technical information necessary to serve the request – such as your licence key or entitlement token, the asset requested, and standard connection data (like IP address) that any web server receives. We use this only to authorise and deliver the download and to protect the service. We do not use it to build a profile or for advertising.

  • What we don't do. We don't store your designs, don't track what you make with an asset once it's downloaded, and don't sell or share this data.

  • Retention. Any server logs are kept only as long as needed for security and troubleshooting, then deleted or anonymised.

  • Third parties. Asset hosting and delivery are provided by [HOSTING PROVIDER, e.g. Cloudflare], who process request data on our behalf as a data processor under their terms ([PROVIDER DPA/PRIVACY LINK]).

4. Your rights (UK GDPR)

You may access, correct, or request deletion of the limited personal data we hold (your purchase record, email, and any retained request logs). Contact info@ssh-creative.com. If you ask us to delete your data we may no longer be able to support or re-issue a licence tied to that record; your existing licence key will continue to work where it validates independently. We keep purchase records only as long as needed to support your licence and meet legal/accounting duties.

5. Legal basis (UK GDPR)

We process the limited data above on the basis of: performing our contract with you (delivering the app, licence, or asset you bought); and our legitimate interests in securing the service and preventing abuse. We do not rely on consent-based tracking because we don't track.

6. Changes

If a future app or library requires different data handling, we'll update this policy and note the change here before release.

7. Contact

info@ssh-creative.com — SSH Creative Ltd, NE21 4QB, United Kingdom.