Legal
Privacy Policy
Last updated · September 2026
1. Information we collect
We collect information you provide directly — such as name, email address, company name, and project details submitted through our contact forms. If you accept analytics cookies, we also collect usage data (page views, session duration, referrer) through Google Analytics to understand which pages are useful. Analytics do not load at all unless you accept. We do not collect sensitive personal data without explicit consent.
2. How we use your information
We use collected information to: respond to your enquiries and proposals; deliver contracted services; send newsletters you've opted into; improve website performance and user experience; comply with legal obligations. We do not sell, rent, or trade your personal data to third parties.
3. Legal basis for processing (GDPR)
For users in the European Economic Area, we process personal data under the following legal bases: contract performance (when we've agreed to provide services); legitimate interests (improving our services, fraud prevention); consent (marketing communications and analytics). You may withdraw consent at any time.
4. Cookies
We use strictly necessary cookies (session management) and optional analytics cookies from Google Analytics. Analytics are disabled by default and only load after you accept them in the consent banner shown on your first visit; declining means no analytics cookies are ever set, and it does not affect site functionality. You can change your mind by clearing this site's data in your browser. The site also stores small preferences (such as arcade high scores and sound settings) in your browser's local storage; these never leave your device.
5. Data retention
We retain personal data only as long as necessary for the purposes collected or as required by law. Contact enquiry data is retained for 3 years. Newsletter subscriber data is retained until unsubscription. You may request deletion at any time.
6. Your rights
You have the right to: access your personal data; correct inaccurate data; request deletion ("right to be forgotten"); restrict or object to processing; data portability; withdraw consent at any time. To exercise these rights, contact us at legal@codecrafters.in.
7. Data security
We implement industry-standard security measures: TLS encryption for data in transit, encrypted storage, access controls, and regular security audits. While we take all reasonable precautions, no transmission over the internet is 100% secure.
8. Third-party services
We use carefully vetted third-party services including: Google Analytics (only with your consent), email delivery services, and cloud infrastructure providers (Vercel). Each is bound by data processing agreements and GDPR-compliant practices. We do not use advertising networks.
9. Changes to this policy
We may update this policy periodically. We'll notify you of significant changes via email (if subscribed) or a notice on this page. Continued use of our services after changes constitutes acceptance.
10. Contact
For privacy-related enquiries, data access requests, or complaints, contact our data controller at legal@codecrafters.in.