Privacy Policy

Last updated: 11 September 2026

1. Who the data controller is

The controller of your personal data is Horcrux Inovative SRL, based in Timișoara, Romania.

• VAT / company number (CUI): [TO BE COMPLETED]
• Trade Register number: [TO BE COMPLETED]
• Registered address: [TO BE COMPLETED]
• Contact email: contact@horcrux.ro
• Phone: +40 722 268 686

2. What I collect and why

2.1 The contact form

When you submit the contact form, you send me the following:

Data	Purpose	Legal basis
Name	So I know who I am replying to	Legitimate interest (Art. 6(1)(f) GDPR)
Email address	So I can reply	Legitimate interest
Subject (service needed)	So I can prepare a relevant answer	Legitimate interest
Message	The content of your enquiry	Legitimate interest

This arrives by email at contact@horcrux.ro and stays in my inbox. It is not saved to any database on the site and is never used for marketing — I send no newsletter and add you to no list.

2.2 IP address, for spam protection

To stop the form being abused, your IP address is passed through an irreversible hash and used only to count how many submissions come from one source per hour (six maximum). Your IP address is never stored in readable form. The hashed record is deleted automatically after one hour.

2.3 Language preference

When you pick Romanian or English, the choice is stored locally in your browser (localStorage, key horcrux_lang). It is not a cookie, it is never sent to the server, and it cannot identify you. You can clear it any time from your browser settings.

3. What I do not do

• No Google Analytics, Google Tag Manager, Meta/Facebook pixel, Hotjar or any other analytics or behavioural tracking.
• No cookies of any kind.
• No profiling and no automated decision-making about you.
• I never sell, rent or trade personal data with anyone.

4. Third parties that may receive data

The site loads resources from a few providers. When your browser requests them, that provider can see your IP address:

Provider	What it does	What it can see
Cloudflare Turnstile	Anti-bot check on form submission	IP address, browser signals
Google Fonts	Serves the Inter and Jost typefaces	IP address
Hostico	Hosts the site and the mail server	IP address, access logs
Supabase	Counts clicks on one affiliate link, on the Cowlendar pages only	That a click happened

The app review pages contain affiliate links. If you click one and buy, I receive a commission from the vendor at no extra cost to you. After the click, your data is handled under that site's privacy policy, not this one.

5. How long I keep it

• Form messages: for as long as the conversation runs, plus up to 2 years afterwards so I have the history of any work we did. I can delete them sooner if you ask.
• Anti-spam records: deleted automatically after one hour.
• Language preference: stays in your browser until you clear it.

6. Your rights

Under the GDPR (EU Regulation 2016/679) you have the right to:

• find out what data I hold about you and receive a copy;
• have inaccurate data corrected;
• have your data erased (the "right to be forgotten");
• restrict how your data is processed;
• object to processing based on legitimate interest;
• receive your data in a portable format;
• lodge a complaint with ANSPDCP, the Romanian supervisory authority.

For any of these, write to contact@horcrux.ro. I reply within 30 days at the latest, usually far sooner.

7. Security

The site runs over HTTPS only, with HSTS enabled. The form has anti-bot protection and rate limiting. There is no personal-data database on the server — messages go straight to email.

8. Changes

If I change this policy, I update the date at the top of the page. Significant changes will be flagged visibly on the site.