Privacy Policy
Last updated: 3 October 2026
In short: this site uses no Google Analytics, no Meta pixel and no other tracking tool. It sets no cookies. The only personal data I receive is what you send me through the contact form.
1. Who the data controller is
The controller of your personal data is Horcrux Inovative SRL, based in Timișoara, Romania.
- Contact email: contact@horcrux.ro
- Phone: +40 722 268 686
2. What I collect and why
2.1 The contact form
When you submit the contact form, you send me the following:
| Data | Purpose | Legal basis |
|---|---|---|
| Name | So I know who I am replying to | Legitimate interest (Art. 6(1)(f) GDPR) |
| Email address | So I can reply | Legitimate interest |
| Subject (service needed) | So I can prepare a relevant answer | Legitimate interest |
| Message | The content of your enquiry | Legitimate interest |
This arrives by email at contact@horcrux.ro and stays in my inbox. It is not saved to any database on the site and is never used for marketing — I send no newsletter and add you to no list.
2.2 IP address, for spam protection
To stop the form being abused, your IP address is passed through an irreversible hash and used only to count how many submissions come from one source per hour (six maximum). Your IP address is never stored in readable form. The hashed record is deleted automatically after one hour.
2.3 Language preference
When you pick Romanian or English, the choice is stored locally in your browser
(localStorage, key horcrux_lang). It is not a cookie, it is never
sent to the server, and it cannot identify you. You can clear it any time from your browser
settings.
3. What I do not do
- No Google Analytics, Google Tag Manager, Meta/Facebook pixel, Hotjar or any other analytics or behavioural tracking.
- No cookies of any kind.
- No profiling and no automated decision-making about you.
- I never sell, rent or trade personal data with anyone.
4. Third parties that may receive data
The site loads resources from a few providers. When your browser requests them, that provider can see your IP address:
| Provider | What it does | What it can see |
|---|---|---|
| Cloudflare Turnstile | Anti-bot check on form submission | IP address, browser signals |
| Hostico | Hosts the site and the mail server | IP address, access logs |
| Supabase | Counts clicks on one affiliate link, on the Cowlendar pages only | That a click happened |
The app review pages contain affiliate links. If you click one and buy, I receive a commission from the vendor at no extra cost to you. After the click, your data is handled under that site's privacy policy, not this one.
5. How long I keep it
- Form messages: for as long as the conversation runs, plus up to 2 years afterwards so I have the history of any work we did. I can delete them sooner if you ask.
- Anti-spam records: deleted automatically after one hour.
- Language preference: stays in your browser until you clear it.
6. Your rights
Under the GDPR (EU Regulation 2016/679) you have the right to:
- find out what data I hold about you and receive a copy;
- have inaccurate data corrected;
- have your data erased (the "right to be forgotten");
- restrict how your data is processed;
- object to processing based on legitimate interest;
- receive your data in a portable format;
- lodge a complaint with ANSPDCP, the Romanian supervisory authority.
For any of these, write to contact@horcrux.ro. I reply within 30 days at the latest, usually far sooner.
7. Security
The site runs over HTTPS only, with HSTS enabled. The form has anti-bot protection and rate limiting. There is no personal-data database on the server — messages go straight to email.
8. Changes
If I change this policy, I update the date at the top of the page. Significant changes will be flagged visibly on the site.