← Home

Privacy policy

Last updated: 27 October 2026

This policy explains what personal data we collect through this site (webbership.dev), why we collect it, and what rights you have.

Who we are

The data controller is WEBBERSHIP SRL, a limited-liability company registered in Romania, with its registered office at 18 Ioan Sârbu St., Timișoara (Tax ID / CUI 32561630, Trade Register no. J35/3035/2013). For anything to do with your data, write to us at hello@webbership.dev.

What we collect from the contact form

When you ask us to call or write back, we collect:

• your name;
• a phone number or an email address, whichever you give;
• optionally, what the project is about (website, app or system);
• optionally, your answers to the follow-up questions (what you want built, where you are starting from, timing, and a rough budget) and a message;
• on Emanuel's page, when you write about a job: an email address (not a phone number) and, optionally, your company and your answers about the job (who you are, the kind of work, the technology and the start);
• recorded automatically, the page the form was sent from and the site language.

The data reaches a first-party service we host ourselves, at the /api/lead endpoint. We use it only to call or write back about your request and, if you want one, to prepare a written proposal. The legal basis is taking steps at your request before a possible contract (Art. 6(1)(b) GDPR). The form says so in one line beside the send button. If you close the form without sending it, we keep nothing. On the business pages, the follow-up questions come after you send the request, are optional and are attached to it. On Emanuel's page, the questions about the job come first and are sent in the same request.

The notification email

When you submit the form, we receive an email notification with your details so we can reply. Delivery of that email is handled on our behalf by Resend, an email-delivery provider acting as our processor. We do not use these details for anything else, and we do not sell them to anyone.

Server logs

Like any website, our web server (Caddy) automatically records technical data on each visit: the IP address, the time of the request, the page accessed, and other request metadata. We process this as a technical necessity and legitimate interest, for security, correct operation, and page delivery (Art. 6(1)(f) GDPR). We do not use it to identify you, and we do not combine it with your form data.

Analytics, consent only

We use our own traffic-analytics system ("webbership tracking"), hosted by us. Collection starts in your browser and loads only after you accept through the consent banner; if you decline, it does not run. The legal basis is your consent (Art. 6(1)(a) GDPR and Art. 4(5) of Romanian Law no. 506/2004).

When active, it sends events such as page_view, scroll, cta_click and generate_lead, so we can understand which pages and buttons are useful. Form events never carry your name, email, phone, company or message. The events reach our own server (c.webbership.app). Our analytics system stores with each event the description your browser sends (the User-Agent header), but not your IP address; like any web server, the server sees the IP address of each request and may keep it in its logs for the short technical period described above.

After you accept, your browser also loads Google Analytics 4 (Google's gtag.js), which sets the _ga and _ga_EB6ZN153CW cookies and sends usage data to Google, including page_view, scroll and generate_lead. Some events we also forward to Google Analytics 4 from our own server, tied to the same Google identifier. Google processes this data as our processor, including outside the EU/EEA, on the basis of the EU-US Data Privacy Framework and the Standard Contractual Clauses in Google's terms.

Your consent choice is stored in the browser, in localStorage, under the webbership_consent_v1 key. After you accept, our script keeps wt_visitor_id and wt_fbp in localStorage, and wt_session_id, wt_ga_session_id and wt_landing_url in sessionStorage. wt_fbp is an identifier kept by our script and sent only to our server.

How long we keep data

We keep form data as long as needed to handle the request and at most 24 months after, then delete it. Server logs are kept for a short technical period needed for security and debugging. The keys in localStorage stay until you clear your browser data, and those in sessionStorage disappear when you close the tab. Google's _ga and _ga_EB6ZN153CW cookies expire about 13 months after your last visit. Data in Google Analytics is kept per the Google Analytics settings. Events our analytics system receives are kept for 14 months, then anonymised automatically: the visitor and session identifiers, the browser description and the query part of page addresses are removed, and we keep only what the reports need: the page address without its query, the event counts and the campaign data. The records of what our server sent to Google Analytics are deleted after 90 days.

Your rights

Under Regulation (EU) 2016/679 (GDPR), you have the right to: access, rectification, erasure, restriction of processing, data portability, and objection. You can exercise any of these rights by writing to us at hello@webbership.dev. We respond within 30 days.

You can change your choice at any time from "Cookie preferences" at the bottom of every page. If you withdraw your consent for analytics, tracking stops, but nothing already saved is deleted: the _ga cookies stay until they expire or you clear them, and the keys in your browser stay until you clear your browser data. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Supervisory authority

If you feel we handle your data incorrectly, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): dataprotection.ro.

Contact