PRIVACY POLICY

1. Data Controller

2. Data We Collect

We collect only the data you voluntarily provide through our contact and problem brief forms:

• Name: to address you personally
• Email address and/or phone number: to reply to your inquiry
• Message: the content of your inquiry
• Business, problem, desired outcome, current setup, timeline, and budget range: only when submitted through the problem brief form

We also use localStorage to store a single key (kk_visited) in your browser. This is a functional flag that skips the boot animation for returning visitors. It contains no personal data and is never sent to any server.

We use Vercel Web Analytics to collect aggregated page view, referrer, and event analytics. These analytics do not use cookies and do not include personal form contents.

3. Purpose of Processing

Your data is processed solely to respond to business inquiries submitted through the contact or problem brief forms. For problem briefs, KodeKrakan may involve Vitalie Certan for paid ads follow-up only when relevant.

4. Legal Basis

We process your data under Article 6(1)(f) GDPR: legitimate interest. Our legitimate interest is responding to potential clients who voluntarily reach out for business purposes.

5. How We Process Your Data

When you submit a form, your message is sent via the Resend API as an email to our inbox. We do not store form submissions in any database. The data exists only as an email in our inbox and in Resend's transactional logs.

Vercel Web Analytics processes aggregated website analytics for visits and non-personal events such as clicking the problem brief CTA, submitting the problem brief form, or clicking the optional ads partner link.

6. Third-Party Processors

• Resend (Resend, Inc., US): email delivery service. Privacy Policy
• Vercel (Vercel, Inc., US): website hosting. Standard server logs (IP, user agent). Privacy Policy
• Vercel Web Analytics (Vercel, Inc., US): aggregated website analytics without cookies. Privacy Policy

7. International Transfers

Our third-party processors are based in the United States. Transfers are covered by Standard Contractual Clauses (SCCs) as adopted by the European Commission, in accordance with Article 46(2)(c) GDPR.

8. Data Retention

• Form data: retained in our email inbox for up to 24 months, then deleted
• localStorage (kk_visited): stored in your browser only; you can clear it at any time via browser settings

9. Your Rights

Under GDPR, you have the right to:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data
• Restriction: limit how we process your data
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interest

To exercise any of these rights, contact us at dev@kodekrakan.com. We will respond within 30 days.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with the Portuguese data protection authority:

11. Cookies & Tracking

This website does not use cookies, Meta Pixel, Google Ads tags, or ad-retargeting scripts. It uses Vercel Web Analytics for aggregated, cookie-free website analytics.

12. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.

13. Contact

For any questions about this privacy policy or your personal data: