← Home

Privacy policy

Last updated: 7 July 2026

This policy explains what personal data we collect through this site (webbership.dev), why we collect it, and what rights you have. We keep it short and honest, like the rest of the site.

Who we are

The data controller is WEBBERSHIP SRL, a limited-liability company registered in Romania, with its registered office at 18 Ioan Sârbu St., Timișoara (Tax ID / CUI 32561630, Trade Register no. J35/3035/2013). For anything to do with your data, write to us at hello@webbership.dev.

What we collect from the contact form

When you fill in the form on the site (the short questionnaire that prepares your proposal), we collect:

• your name;
• your email address;
• your phone number, if you choose to add it (optional);
• your questionnaire answers: the type of need, whether you already have a site or are starting from scratch, the main problem, and a rough budget.

The data reaches a first-party service we host ourselves, at the /api/lead endpoint. We use it only to prepare and send you a written proposal. The legal basis is your consent together with the pre-contractual steps taken at your request (Art. 6(1)(a) and (b) GDPR). We do not ask for personal data until the last step of the questionnaire, and if you don't submit it, we keep nothing.

The notification email

When you submit the form, we receive an email notification with your details so we can reply. Delivery of that email is handled on our behalf by Resend, an email-delivery provider acting as our processor. We do not use these details for anything else, and we do not sell them to anyone.

Server logs

Like any website, our web server (Caddy) automatically records technical data on each visit: the IP address, the time of the request, the page accessed, and other request metadata. We process this as a technical necessity and legitimate interest, for security, correct operation, and page delivery (Art. 6(1)(f) GDPR). We do not use it to identify you, and we do not combine it with your form data.

Analytics, consent only

We use our own traffic-analytics system ("webbership tracking"), hosted by us. Collection starts in your browser and loads only after you accept through the consent banner; if you decline, it does not run.

When active, it may send events such as page_view, cta_click, and generate_lead, so we can understand which pages and buttons are useful. After you accept, alongside our own script your browser also loads Google's analytics tag (Google Analytics 4, via Google's gtag.js), which may set Google cookies and sends usage data to Google. In addition, from our own server we forward the event and conversion data to Google (Google Analytics 4 and Google Ads) and Meta, which process it as our processors to measure and optimise advertising. The data may be processed by these providers outside the EU/EEA, under their own policies.

Your consent choice is stored in the browser, in localStorage, under the webbership_consent_v1 key. After you accept, the system may set first-party keys in the browser such as wb_visitor_id, wb_session_v1, and wb_attribution_v1. By default, this analytics is active only when we have it configured and turned on.

How long we keep data

We keep form data as long as needed to handle the request and at most 24 months after, then delete it. Server logs are kept for a short technical period needed for security and debugging. Browser identifiers remain until the session expires or until you clear your browser data.

Your rights

Under Regulation (EU) 2016/679 (GDPR), you have the right to: access, rectification, erasure, restriction of processing, data portability, and objection. You can exercise any of these rights by writing to us at hello@webbership.dev. We respond within 30 days.

If you withdraw your consent for analytics, clear the data saved in your browser or decline through the consent banner; withdrawal does not affect the lawfulness of processing carried out beforehand.

Supervisory authority

If you feel we handle your data incorrectly, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): dataprotection.ro.

Contact