Privacy Policy

uzgrudinti.dev (“we”, “us”) is a small digital studio that builds websites, mobile apps, Discord bots and Discord servers. This policy explains what personal data we collect through this website, why we collect it and what rights you have.

If you have any privacy question, write to us through the contact form and mention “privacy”.

• Account data: your email address, name and password. The password is stored only as a hash by our authentication provider; we cannot read it.
• Requests and orders: the details you submit when you request a service (for example a description of your project), prices, and the status of your order and payment.
• Messages: what you write in the contact form and our replies.
• Activity: likes you give to projects in our portfolio and which notifications you have read.
• Technical data: IP address and request logs processed by our hosting provider for security and to keep the site running.
• Anonymous usage statistics: which pages are viewed, clicks on links and buttons, approximate country, device type, browser and the website you came from. We do not use cookies for this and we do not store your IP address; a visitor is recognised only by a one-way hash that changes every day.

We never see or store your card number. Payments are handled by Stripe.

• To create and run your account and to provide the services you request (performance of a contract).
• To process payments and keep accounting records (performance of a contract and legal obligations).
• To answer your messages and requests (steps before a contract and our legitimate interest in communicating with you).
• To keep the website secure and prevent abuse (legitimate interest).
• To understand how the website is used and to improve it, using anonymous statistics (legitimate interest).

We do not sell your personal data and we do not use it for advertising or profiling.

We use trusted service providers (data processors) that handle data only on our instructions:

• Supabase: database, authentication and file storage.
• Stripe: payment processing.
• Resend: sending transactional emails (when enabled).
• Our hosting provider: running the website.

Some of these providers may process data outside the European Economic Area. In that case we rely on appropriate safeguards, such as standard contractual clauses. We may also disclose data when the law requires it.

We only use cookies that are needed for the site to work:

• Sign-in session cookie: keeps you logged in.
• Language cookie (“lang”): remembers the language you chose, for up to one year.

Our own privacy-friendly statistics do not use cookies or any identifiers stored on your device, and we respect the “Do Not Track” browser setting. We do not use advertising or tracking cookies. Our fonts are hosted on our own servers, so your browser does not contact Google Fonts.

• Account data: while your account exists. You can ask us to delete it at any time.
• Order and payment records: for as long as accounting and tax laws require.
• Contact messages: for as long as needed to handle your request and follow up, and then deleted or anonymised.
• Anonymous statistics: up to 24 months, then automatically deleted.
• Server logs: for a short period set by our hosting provider.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent where we rely on it.

To use these rights, contact us through the contact form while signed in or using your account email. You also have the right to lodge a complaint with a data protection authority. In Lithuania this is the State Data Protection Inspectorate (vdai.lrv.lt).

Our services are not directed at children and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

We may update this policy from time to time. The date at the top shows when it was last changed. If the changes are significant, we will let you know on the website or by email.