Privacy Policy

Your privacy is extremely important to us. This Privacy Policy document describes in detail what types of personal information we collect, how we use it, and how we protect it.

1. What Data We Collect

1.1 Data Collected Automatically

When you visit our website, we automatically collect technical information from two sources:

• Google Analytics (via Google Tag Manager): Collects data about user behavior and uses anonymized IP addresses.
• Web server log files: Store technical records of each request made to the website.

This information includes:

• The exact IP address of your device (stored only in web server log files). Note: An IP address may be considered personal data.
• Browser type and version
• Operating system
• Internet service provider (ISP)
• Date and time of visit
• Pages you view
• Approximate geographic location (country, city)
• Time spent on pages

Purpose of automatically collected data:

• Google Analytics data (which uses anonymized IP addresses) is used exclusively in aggregated form for statistical analysis and website improvement.
• Exact IP addresses in server log files are used solely for technical support, security purposes, and server performance monitoring. They are not used to personally identify you outside of investigating security incidents or technical errors.

1.2 Data You Provide Voluntarily

If you fill out contact or feedback forms on our website, we may collect:

• Name
• Phone number
• Description of your inquiry or project

This data is used exclusively to contact you in response to your request and to provide consultation regarding your inquiry or project. You decide whether or not to provide this information.

2. How We Use Your Data

We use the collected data for the following purposes, based on the appropriate legal grounds:

• Website traffic analysis – understanding how users interact with our website (based on Google Analytics). Legal basis: Your consent (for analytical cookies).
• Service quality improvement – optimizing website performance and user experience (based on Google Analytics). Legal basis: Your consent.
• Technical support / Security – ensuring stable and secure website operation (based on server logs). Legal basis: Our legitimate interest in ensuring website security and stability.
• Customer communication – responding to your inquiries and providing consultations (based on data provided voluntarily). Legal basis: Necessity to take steps prior to entering into a contract.
• Performance of contractual obligations – if you order our services (based on data provided voluntarily). Legal basis: Necessity for the performance of a contract.

3. Cookies and Similar Technologies

We use cookies (small text files stored on your device) and similar technologies to ensure functionality, analyze website usage, and store your preferences.

3.1 Types of Cookies We Use

• Technical (Essential) Cookies: Necessary for proper website operation, security, and maintaining user sessions. These cookies do not require your consent.
• Functional Cookies: Used to remember your preferences (such as language or region) to improve user experience.
• Analytical (Tracking) Cookies: Used to collect statistical information about website visits and interactions, including for Google Analytics. They help us understand how users use the website so we can improve it.

3.2 Consent to the Use of Cookies

In accordance with applicable law, we set analytical and functional cookies only after receiving your active consent, which you provide via our cookie consent banner. You have the right to refuse or withdraw your consent at any time.

3.3 How to Disable or Manage Cookies

You can disable or restrict the use of cookies through your browser settings, which may affect the functionality of certain parts of the website.

• Chrome: Settings → Privacy and security → Cookies
• Firefox: Settings → Privacy & Security → Cookies
• Safari: Settings → Privacy → Block all cookies

Note: If you disable all cookies, this may affect the proper functioning of the website, especially the saving of your preferences.

4. Data Sharing

We do not sell or transfer your personal data to third parties for commercial purposes. Data is shared solely to ensure website functionality, analytics, and fulfillment of our obligations. Your data may be accessible to the following third parties (Processors) and internal entities:

• Analytics service providers (Google Analytics): Access to anonymized traffic data is provided to Google for statistical analysis. Google operates in accordance with its own privacy policy.
• Hosting provider: Our hosting service provider acts as a data processor. This is technically necessary for data storage and uninterrupted website operation, as your data (including log files) passes through its servers.
• Internal access (Cyber Snail Studio employees): Access is granted only to employees for whom it is strictly necessary to perform their duties, provide services, or offer technical support (Need-to-know principle).

4.1 International Data Transfers

Since we use Google Analytics, your data (including anonymized data) may be transferred to and processed in the United States of America, a country outside the European Union / European Economic Area. To ensure an adequate level of protection, we have entered into the necessary Standard Contractual Clauses (SCCs) approved by the European Commission with Google.

Important: We are not responsible for the privacy policies of third-party websites that may be linked from our website.

5. Data Retention Period

We retain your data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law.

• Google Analytics data: Retained for 26 months (user-level and event-level data), after which it is automatically deleted according to Google’s settings.
• Contact form data: Retained until your request or service is fulfilled or, in the case of an order, for up to 3 years to meet contractual, tax, and legal obligations.
• Server logs (exact IP addresses): Retained for security and technical monitoring purposes for up to 12 months, after which they are automatically deleted.

6. Your Rights

Under Ukrainian law and the GDPR (if you are located in the EU), you have the following rights:

• Right of access – to know what data we hold about you.
• Right to rectification – to correct inaccurate data.
• Right to erasure – to request deletion of your data (where not prohibited by law).
• Right to restriction of processing – to limit how your data is used.
• Right to data portability – to receive a copy of your data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent – to withdraw your consent at any time.
• Right to object – to object to the processing of your data.

How to exercise your rights: To exercise any of these rights, please contact us using the contact details provided in Section 9.

7. Data Security

We take the protection of your personal data seriously and implement reasonable technical and organizational measures to protect it against unauthorized access, alteration, loss, or disclosure. Our key security measures include:

• Encryption (SSL/TLS): Use of SSL/TLS technology to encrypt data transmitted between your device and our server.
• Access control: Strict access control to personal data (Need-to-know principle), granted only to authorized employees.
• Server protection: Regular software updates, firewall usage, and monitoring to protect against cyberattacks.

Important: Despite our efforts, no method of data transmission over the Internet or electronic storage is 100% secure. By using our website, you acknowledge this risk.

8. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy. All changes will be published on this page with an updated date. We recommend reviewing this page periodically. If we make material changes affecting the processing of your data, we will notify you additionally (if we have your contact details).

Last updated: December 1, 2025

9. Contact Information

If you have any questions regarding this Privacy Policy or wish to exercise your rights, please contact us:

• Email: studio@cyber-snail.com
• Phone: +380734400403
• Address: Uman, Ukraine
• Website: https://cyber-snail.com/