Privacy Policy

This policy describes what personal data this website collects, why, and what happens to it. It is written to be checkable: everything it claims about the site can be confirmed by opening the developer tools on any page.

Who is responsible

The data controller is Subeleven LLC, a limited liability company formed in the State of New Mexico, United States, with its registered address at 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States. The company is operated from Bucharest, Romania, which is where the one person behind it works and where the data is handled. Full entity details are on the legal notice.

For anything in this policy, including any of the rights below, write to conrado@subeleven.io.

Cookies

This site sets no cookies. It has no cookie banner because there is nothing to consent to: there is no advertising, no tag manager, no product analytics and no cross-site tracking of any kind. Nothing on this site stores an identifier in your browser or follows you to another site.

Analytics

The only measurement on this site is Vercel Speed Insights, which reports page-performance timings (Core Web Vitals such as LCP, INP and CLS) so I can tell whether the pages are actually fast. It is cookieless: it sets no cookie and no identifier that persists between visits or across pages, and its data is aggregated. It records the page path, coarse device and connection characteristics, and the timings themselves. It does not build a profile, does not identify you, and is not used for advertising.

There is no Google Analytics, no Google Tag Manager, no Meta Pixel and no third-party analytics on this site. If you want to confirm that, open the network tab on any page: every request goes to this domain.

The contact form

The contact form at /en/contact collects four things: your name, your email address, the project type you select, and your message. Nothing else is collected, and none of it is optional beyond what the form marks as optional.

• Why. To read your enquiry, reply to it, and — if it turns into a project — scope and quote the work. That is the only use.
• Legal basis. Article 6(1)(b) GDPR: taking steps at your request prior to entering into a contract. If your message turns out not to be about working together, the basis is Article 6(1)(f), my legitimate interest in answering people who write to me.
• Who it is shared with. The form sends the message to me by email through Brevo (Sendinblue SAS, France), the transactional email provider, and the resulting email sits in my mailbox. The site itself is hosted by Vercel Inc. Neither is given the data for any purpose of their own.
• How long it is kept. Enquiries that do not lead to work are deleted within 12 months. Where an enquiry becomes a project, the correspondence is kept for the life of the engagement and for as long afterwards as tax and contractual record-keeping requires.
• Marketing. Writing to me does not sign you up to anything. There is no newsletter and no mailing list.

Server logs and abuse prevention

Like any website, this one is served by infrastructure that keeps short-lived request logs, which include IP addresses. The contact form additionally uses the requesting IP address, held in memory only, to rate-limit submissions and stop automated abuse. These logs are Vercel's standard operational logs; they are not analysed, not combined with anything else, and not used to identify visitors.

International transfers

Subeleven LLC is registered in the United States and operated from Romania. Vercel Inc. is established in the United States, and personal data processed in connection with hosting may therefore be transferred there, under the standard contractual clauses and supplementary measures in Vercel's data processing agreement. Brevo processes data within the European Union.

Your rights

Under the GDPR you have the right to access your personal data, to have inaccurate data corrected, to have it erased, to restrict or object to its processing, and to receive it in a portable format. To exercise any of these, email conrado@subeleven.io. There is no form to fill in and no charge; I will respond within one month.

If you believe your data has been mishandled, you can complain to the competent supervisory authority. Because the establishment is in Romania, that is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), and you may also complain to the authority in the EU or EEA country where you live.

Changes to this policy

When this text changes, the date below changes with it. It is a fixed value in the source, not the current date.

Last updated: 8 September 2026