Privacy Policy

Updated: October 6, 2026

This page describes what data we collect through this site, why, how long we keep it, and how you can control it. It applies to every CODEPEDIA domain (codepedia.studio, codepedia.md).

Who the controller is

S.R.L. "CODEPEDIA", IDNO 1023600068387, Chișinău, Republic of Moldova.

For any question about your data: [email protected].

What we collect through the contact form

When you submit the contact form, we collect: your name, email address, company (optional), message, budget range (optional), and how you heard about us (optional). We also keep the page you submitted from and the page you arrived from (referrer).

If you use the site's qualification questionnaire, we additionally collect: your project stage, estimated budget, a contact link/handle, and your notes. This data is saved in the same request store as the contact form.

Your IP address is used solely to limit automated/abusive submissions and is not stored alongside your request. Rate-limit entries older than 10 minutes are automatically deleted the next time any visitor submits a form (not on a fixed schedule).

What is logged automatically

On every visit, our hosting provider (Vercel) technically logs your IP address, the page requested, the date and your browser type, so the site keeps working and stays secure. We do not use these logs to identify or profile you.

Cookies

codepedia_locale — remembers your chosen language (Romanian/English). Necessary for the site to work, valid 1 year.

codepedia_consent — remembers your choices about the cookies below. Necessary for the site to work, valid 6 months.

Google Analytics and Meta Pixel — used only if you explicitly choose "Accept all" or enable the relevant categories in the cookie banner. You can change your choice anytime via the "Cookie settings" link in the footer.

Why we process this data

Contact form and qualification questionnaire data: to respond to your request and, at your request, take the steps before a possible collaboration (Art. 6(1)(b) GDPR).

IP address (temporary) and hosting logs: our legitimate interest in preventing abuse and keeping the site secure (Art. 6(1)(f) GDPR).

Analytics and marketing: only with your explicit consent (Art. 6(1)(a) GDPR). You can withdraw it anytime via "Cookie settings", without affecting processing that happened before.

We make no automated decisions and do no profiling that produces legal effects for you.

How long we keep data

Contact requests are kept as long as necessary to respond and evaluate working together. Exact retention period: [ to be completed ]. You can ask for deletion at any time.

Who we share data with

Supabase — the database, with servers in the European Union (Ireland). Vercel — site hosting (US). Resend — delivery of the internal notification sent to our team about a new request (US).

Google Analytics and Meta Pixel only receive data if you explicitly consented.

We do not sell your data or share it for any other purpose.

Transfers outside the European Union

Vercel and Resend may process data in the US. These transfers rely on the safeguards in their data processing agreements, which include the European Commission's standard contractual clauses.

Your rights

You can ask at any time for access to your data, its correction, deletion or restriction, a copy in a structured format (portability), and you can object to processing based on legitimate interest. Write to us at [email protected]; we reply within one month.

You have the right to lodge a complaint with a supervisory authority: in Moldova, the National Center for Personal Data Protection (Centrul Național pentru Protecția Datelor cu Caracter Personal); if you are an EU resident, your local data protection authority.