Privacy policy

What you give us

1. //01Through the contact form: your name, your email address and the message you write
2. //02Through the short form on the home page: your email address and one sentence about your constraint
3. //03By email, phone or in a call, when you contact us directly
4. //04During a project, the data needed to deliver the work agreed in the contract

What third parties collect on our behalf

1. //01Resend delivers the two emails a form sends: the notification to our inbox and the confirmation to you. It processes your email address and the message content.
2. //02Google reCAPTCHA v3 checks that a form submission comes from a person. It loads only when you start filling in a form and processes interaction signals, your IP address and a browser identifier.
3. //03PostHog (EU cloud, Frankfurt) — product analytics, session replay, error reports and application logs. It runs in cookieless mode: it stores no identifier in your browser, and your IP address is hashed server-side into a daily anonymous id. Replays mask everything you type.

What is collected automatically

1. //01Vercel, our hosting provider, keeps server logs with your IP address, browser and the pages requested, to keep the site secure and running
2. //02Your language preference, stored as a cookie when you switch the site's language
3. //03reCAPTCHA's signals as described above, only on pages where you open a form
4. //04PostHog, in cookieless mode: the pages you view, clicks, performance timings, errors and a replay of the session with every input masked, tied to a daily hash of your request rather than to a cookie

1. //01Steps before a contract and performance of a contract (Article 6(1)(b)): replying to your enquiry and delivering the work you ask for.
2. //02Legitimate interest (Article 6(1)(f)): keeping the site secure and free of spam, and keeping the records of a business relationship.
3. //03Legal obligation (Article 6(1)(c)): keeping accounting records for as long as Croatian tax and company law require.
4. //04Consent (Article 6(1)(a)): nothing on this site relies on consent today. If we ever add processing that does, we will ask first.

1. //01Reply to your message and prepare the first call
2. //02Deliver the work agreed with you and keep the related records
3. //03Send the two transactional emails a form triggers; nothing else is sent
4. //04Keep the website secure and free of spam
5. //05Meet our accounting and legal obligations

1. //01The EU–US Data Privacy Framework, where the processor is certified under it
2. //02Standard Contractual Clauses approved by the European Commission, in the processor's data-processing agreement

1. //01Access the personal data we hold about you
2. //02Have inaccurate data corrected
3. //03Have your data deleted
4. //04Restrict how we process it
5. //05Object to processing based on legitimate interest
6. //06Receive your data in a portable format
7. //07Withdraw consent, where processing relies on it
8. //08Complain to a supervisory authority