Legal

Privacy Policy

This policy explains what personal data capris.dev ("Capris", "we", "us") collects, why we collect it, and what rights you have under the General Data Protection Regulation (GDPR) and Romanian data protection law.

The data controller is:


1. Data we collect

Log data

When you visit this website, our hosting provider (Netlify) automatically records standard server log data, including your IP address, browser type, referring URL, and the pages you visit. This data is collected to ensure the security and performance of the site and is not linked to any personal profile.

Analytics data

We use Google Analytics (GA4) to understand aggregate traffic patterns — which pages are visited, how long visitors stay, and where they arrive from. GA4 anonymises IP addresses before storage. No cross-site tracking profiles are built from this data. You can opt out via the Google Analytics opt-out browser add-on.

Contact form

When you submit the contact form or send an email to contact@capris.dev, we collect the information you provide — typically your name, email address, company, and a description of your project. We use this data solely to respond to your enquiry and, if an engagement follows, to manage the project relationship.


2. Legal basis for processing

  • Log and analytics data — legitimate interest (Art. 6(1)(f) GDPR): keeping the site secure and understanding how visitors use it.
  • Contact form data — pre-contractual steps or legitimate interest (Art. 6(1)(b) and 6(1)(f) GDPR): responding to a business enquiry you initiated.

3. How long we keep data

  • Log data: retained by Netlify per their standard policy (typically 30 days for raw logs).
  • Analytics data: retained in Google Analytics for 14 months, then automatically deleted.
  • Contact enquiries: kept for as long as the business relationship requires, and no longer than 3 years after the last contact if no engagement results.

4. Who we share data with

We do not sell or rent your personal data. Data may be processed by the following sub-processors, each bound by a Data Processing Agreement:

  • Netlify, Inc. — website hosting and server logs (US; Standard Contractual Clauses apply)
  • Google LLC — analytics (US; Standard Contractual Clauses apply)

No other third parties receive your personal data unless required by law or with your explicit consent.


5. Your rights

Under GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your data where there is no overriding legitimate reason to keep it.
  • Restriction — ask us to limit how we use your data while a dispute is resolved.
  • Objection — object to processing based on legitimate interest.
  • Portability — receive your data in a structured, machine-readable format.
  • Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email contact@capris.dev. We will respond within 30 days.

You also have the right to lodge a complaint with the Romanian national supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).


6. Cookies

This site uses one first-party cookie set by Google Analytics (_ga, _ga_*) to distinguish visitors for aggregate reporting. No marketing or advertising cookies are set. You can block or delete cookies at any time through your browser settings.


7. Changes to this policy

We may update this policy when our practices change. Material changes will be reflected in the "Last updated" date above. Continued use of the site after a change constitutes acceptance of the revised policy.


8. Contact

Questions about this policy or your personal data: