--- title: "Privacy policy" description: "How djwp.xyz handles personal data: the contact form, Google Analytics only with consent, server logs, retention and your rights under GDPR." url: "https://djwp.xyz/privacy-policy/" date_modified: "2026-11-05" --- # Privacy policy Legal # Privacy policy What we collect, why, how long we keep it and what you can ask us to do with it. **Last updated: 5 November 2026.** This policy explains what personal data djwp.xyz collects, why, how long it is kept and what you can ask us to do with it. ## Who is responsible Den Dyuzhaev, who runs the DJWP web studio, operates djwp.xyz and is responsible for the personal data described here. For privacy questions or requests, email [hello@djwp.xyz](mailto:hello@djwp.xyz). ## Your inquiry When you use the inquiry form, we store your name, email address and message, any website address or budget you add, whether your inquiry is about a project or a website fix, and the page you sent it from. The inquiry is saved in the website’s database and a notification is sent to our studio mailbox. Providing this information is voluntary, but the form needs your name, email address and message to send your inquiry; you can also simply email us. We use inquiry details to reply and to discuss your request. Where you ask about a contract with us personally, the legal basis is taking steps at your request before a contract (GDPR Art. 6(1)(b)); for other inquiries, including those sent on behalf of a company, it is our legitimate interest in handling business correspondence (Art. 6(1)(f)). We do not sell your personal data or use inquiry details for newsletters or advertising. To limit spam, the form uses a hidden field, a signed timestamp and a limit of messages per hour. For that limit we count requests under a temporary identifier derived from your IP address with a secret key; these identifiers are removed within 48 hours. If a form submitted without JavaScript has an error, the fields you entered are kept for up to ten minutes so the form can be filled in again. The legal basis for this protection is our legitimate interest in keeping the website secure (Art. 6(1)(f)). We keep inquiries and the correspondence that follows for up to three years after we receive them, unless a legal obligation or a legal claim requires longer; inquiries older than three years are deleted from the website automatically, and we delete the matching emails from our mailbox. You can ask us to delete them sooner. We do not make decisions about you solely by automated means. ## Analytics — only if you accept If you choose *Accept* in the cookie banner, we load Google Analytics 4 to understand which pages are useful, how visitors find the site and how many inquiries are sent. Google Analytics sets cookies named _ga and _ga_… (lasting up to two years) and receives information about your visit: the pages you view (without query strings), the referring site, your device and browser type, and your approximate location. Google receives your IP address when your browser connects to its services; how Google uses and discards it is explained in its documentation for [the EU, UK and Switzerland](https://support.google.com/analytics/answer/12017362) and [other regions](https://support.google.com/analytics/answer/16871531). Google signals and ad personalisation are switched off, and Google Analytics keeps event-level data for two months. Until you accept — and if you decline, or your browser sends a Global Privacy Control signal — the Google Analytics script is not requested and nothing is sent to Google. The legal basis is your consent (Art. 6(1)(a)). You can withdraw it at any time in *Cookie settings* at the bottom of every page: withdrawal stops further collection and removes the Google Analytics cookies set by this site, without affecting the lawfulness of processing before withdrawal. We ask again after twelve months. Google LLC processes this data for us. More: [how Google uses information from sites that use its services](https://policies.google.com/technologies/partner-sites). ## Technical logs Our server records technical data about requests: IP address, date and time, the page requested, the response, the referring page and the browser’s user agent. We use these logs to run the website, find faults and investigate abuse (legitimate interest, Art. 6(1)(f)). Web server logs are deleted after about five weeks and mail server logs after about ten days; records needed for a specific security investigation may be kept until it is resolved. ## Cookies and browser storage - Your **analytics choice** and your **light or dark theme** are saved in this browser’s local storage; we do not send them to our server. The theme stays until you change it or clear site data; the analytics choice is kept for twelve months. If browser storage is blocked, your choice applies only to the current page. - **Google Analytics cookies** are set only after you accept. - Site administrators receive WordPress login cookies when they sign in; visitors do not. We do not use advertising cookies, tracking pixels or social media widgets. Fonts and images are served from our own server. ## Service providers - **RackNerd** hosts our server in the United States, including the website database, logs and the studio mailbox. - **Cloudflare** provides DNS for djwp.xyz. Website requests go directly to our server; Cloudflare proxying is not used. - **Google** provides Google Analytics (only with your consent) and stores our website backups on Google Drive. Backups are encrypted before upload, so their contents cannot be read in Drive. Some of these providers are in the United States. Google LLC participates in the EU–US Data Privacy Framework. You can ask us at [hello@djwp.xyz](mailto:hello@djwp.xyz) for information about the safeguards that apply to these transfers. ## Backups We back up the website every night. Backups include the database, so they can contain inquiries; they are used only to restore the site and expire after about two months. If we ever restore a backup, we repeat any deletions made since it was taken. ## Your rights Where applicable, you can ask us for access to your personal data and a copy of it, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable format. You can withdraw consent to analytics at any time. Email [hello@djwp.xyz](mailto:hello@djwp.xyz); we respond without undue delay and normally within one month, and if we need longer, as the law allows, we explain why within that month. You can also complain to a data protection authority, in particular where you live or work or where you believe the infringement happened. ## Children This website and our services are intended for adults. ## Changes If we change how we handle personal data, we will update this page and the date at the top. --- **[Read full article: Privacy policy](https://djwp.xyz/privacy-policy/)**