Privacy, Cookies & GDPR Notice
I use the information you send through this website only to reply to business inquiries, prepare proposals, protect the contact form from abuse, and meet legal or accounting obligations connected to a potential or active project.
Who controls the data
The controller for this website is EcDev Labs Inc, CUI 45814106, registered with the Romanian Trade Register under J35/2766/2024 and based in Timisoara. For privacy requests, email office@ecdevlabs.com.
What I collect
- Contact details you provide, such as name, email address, company, selected service, intent, and message.
- Technical details attached to a form submission, such as IP address, browser user agent, referrer page, and submission timestamp.
- Basic server/security logs generated when the site is requested, such as IP address, requested URL, timestamp, status code, and browser user agent.
Cookies and analytics
- The only cookie this site sets is a strictly necessary security cookie (CSRF protection, named __Host-csrf_tok, expires after 2 hours) while you use the contact form: it blocks forged submissions, holds no personal data, and does no tracking. There are no marketing cookies and no third-party analytics scripts.
- If you press the dark/light button in the menu, your choice is kept in your browser under a single localStorage key. It never leaves your device, holds no personal data, is never sent to the server, and does no tracking. Clear your browser data and it is gone; the site opens in its default scheme again.
- Fonts, scripts, and stylesheets are served from this site’s own server (self-hosted). Nothing on any page is loaded from a third-party server.
- If I add analytics, advertising pixels, or non-essential cookies later, they will not load until I add a cookie consent mechanism and update this notice.
Why I use it
- To respond to your inquiry and discuss possible work with you.
- To prepare a quote, scope, or follow-up if you ask for one.
- To limit spam, diagnose delivery issues, secure the site, and keep the form reliable.
- To keep records needed for contracts, invoices, accounting, tax, or legal obligations if an inquiry becomes paid work.
Legal bases under GDPR
- Pre-contract steps or contract performance when you ask about a project, quote, audit, training, or collaboration.
- Legitimate interests in replying to business inquiries, securing the site, preventing abuse, and keeping basic records of communication.
- Legal obligations where records must be kept for accounting, tax, or compliance reasons.
- Consent, if optional analytics or marketing cookies are added in the future.
Sharing and processors
- Messages are delivered through Twilio SendGrid and may be stored in the inboxes used to answer you, including a Gmail mailbox. Both are US-based processors; Twilio and Google are certified under the EU-US Data Privacy Framework. Hosting, DNS, security, and other technical service providers may process limited data only as needed to run the website and deliver messages. I do not sell contact form data.
- Booking a call runs through Calendly (calendly.com). The name and email address you enter there are processed by Calendly as an independent controller, under Calendly’s own privacy policy.
Retention
Inquiry emails are usually kept for up to 12 months, unless a project, legal, accounting, tax, security, or ongoing business reason requires a longer period. Server/security logs are kept only as long as needed for operations, debugging, and abuse prevention; contact-form rate-limiting records are cleared out as later submissions come in, once they are older than the rate-limit window.
Your choices
You can exercise your rights of access, rectification, erasure, restriction, portability, and objection by emailing office@ecdevlabs.com. If I need to retain information for accounting, legal, tax, or security reasons, I will explain that limit.
Complaints
If you believe your data protection rights have not been respected, you can contact me first so I can try to fix it. You also have the right to contact the Romanian data protection authority, ANSPDCP.