ROLogin

Privacy policy

30 September 2026

Cookie policy

Who we are

Netcraft Digital SRL, tax ID RO49966280, trade register J12/1949/2024, Aleea Băișoara nr. 5, 400445 Cluj-Napoca, jud. Cluj, Romania, is the controller for netcraft.studio. For privacy, email privacy@netcraft.digital.

What this policy covers

It covers the public pages of Netcraft Studio, the account, and subscription payment. It does not cover the sites you publish with Netcraft Studio: for those sites you are the controller, and we process data as a processor in order to provide the service.

What we process

It depends on what you do on the site.

  • A visit without an account: the cookie choice. If you press Accept, Google Analytics receives the pages viewed, a cookie identifier, the device and browser type, the language, the page you came from, and campaign parameters. Analytics 4 does not store the full IP address; it uses it to derive an approximate location.
  • Account: name, email, password (stored only as a hash), and language. At signup we keep the time, the version of the text you accepted, the IP address, and the browser, as proof of consent.
  • Marketing email: only if you separately tick that you want news and offers. It is not required to create an account.
  • Payment: the card is processed by Stripe. We do not store the card number. We keep the Stripe customer id, the subscription status, and the billing details you enter.

Why, and on what basis

  • The cookie that remembers the choice is strictly necessary, so we can honour a refusal and not ask on every page. GDPR Article 6(1)(f) and the strictly-necessary cookie exemption in Romanian Law 506/2004.
  • Google Analytics relies on consent, GDPR Article 6(1)(a) and Article 4 of Law 506/2004. You can refuse it or withdraw it at any time.
  • The account and the service rely on the contract, GDPR Article 6(1)(b).
  • Invoices are kept because the law requires it, GDPR Article 6(1)(c).
  • Marketing email relies on a separate consent, GDPR Article 6(1)(a). You withdraw it from your profile or by emailing the address above.
  • Account security relies on our legitimate interest, GDPR Article 6(1)(f).

How long we keep it

  • The cookie choice: 6 months, then we ask again.
  • Google Analytics cookies, if you accepted them: 6 months at most.
  • Visit data in the Google Analytics property: 2 months.
  • The account: for as long as it exists. After deletion we keep what the law requires for invoices and to show the consent given at signup.

Who receives it

Google Ireland Limited receives analytics data only after Accept. Google may process data in the United States. The transfer relies on the EU-US Data Privacy Framework, where Google is certified, and on standard contractual clauses.

Stripe processes the payment. The application runs on Vercel in Frankfurt (EU); static files may be served from their distribution network. The database is Neon. We do not sell the data and we do not use it for advertising.

Your rights

You can ask for access, rectification, erasure, restriction, or portability, you can object to processing based on legitimate interest, and you can withdraw consent. Withdrawal does not affect processing that happened before it. Email privacy@netcraft.digital. For the analytics cookie, use Cookie settings on this site.

You can complain to the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing, at www.dataprotection.ro.

Children, automated decisions, changes

The service is not directed at anyone under 16. We do not knowingly collect data from children.

We do not make automated decisions that produce legal effects for you, including through Analytics.

This policy was updated on 30 September 2026. If we change what we measure or the banner text, the consent version increases and the banner is shown again.