This is a draft privacy notice, written to reflect how this site actually works today. It has not yet been reviewed by a lawyer — treat it as a starting point, not a finished legal document, until it has been.
Last updated: 9 August 2026.
Who we are
This site is operated by Arsvatra. There is no registered company yet — Arsvatra is currently an unregistered studio name, and the individual(s) running it are the ones responsible for the data described below (the “controller,” in GDPR terms). This section will be updated with a company name and registration details once one exists.
You can reach us about anything on this page at arsvatra@gmail.com.
What data we collect
The only personal data this site collects is what you choose to send through the contact form:
- Your name
- Your email address
- The message you write
When you submit the form, we also automatically record your IP address and the time of submission.
We do not use analytics, tracking cookies, or any third-party advertising scripts. Nothing is collected just from browsing the site.
Why we collect it, and on what basis
- Name, email, message — so we can read and reply to what you sent us. The legal basis is our legitimate interest in responding to enquiries directed at us, which you create by submitting the form.
- IP address and timestamp — used only to detect and limit spam/abuse of the form (a short rate limit). The legal basis is our legitimate interest in keeping the form usable.
Where it’s stored
Submissions are stored in a database we operate ourselves (a Cloudflare D1 database, accessed through a Cloudflare Worker we wrote) — not with a third-party forms or email-marketing service, and we do not sell or share this data with anyone else.
The site itself is a static site hosted by Porkbun. A separate, non-public admin tool lets us read and manage messages; access to it is restricted.
How long we keep it
We keep contact-form submissions for as long as needed to handle your enquiry, and delete them once they’re resolved and there’s no ongoing reason to keep them — in any case, no longer than 12 months. If you’d like your message deleted sooner, email us and we’ll remove it.
Your rights
Because this site can be reached from the EU (and we’re in Romania), you have rights under the GDPR over any personal data we hold about you, including the right to:
- ask what data we hold about you and get a copy of it;
- ask us to correct it if it’s wrong;
- ask us to delete it;
- object to how we’re using it.
To exercise any of these, email arsvatra@gmail.com. You can also lodge a complaint with Romania’s data protection authority, ANSPDCP (dataprotection.ro), if you think we’ve mishandled your data.
Changes to this policy
If how we collect or use data changes — for example, if we add analytics or a mailing list — we’ll update this page and the “last updated” date above.
