Last updated: 20 October 2026
Who is responsible
This site belongs to measuredcode, a development studio. For any question about your data, write to mail@measuredcode.com.
Browsing the site
The site shows no advertising. Fonts and images are served from this site, not from third parties. Our server keeps standard access logs (IP address, time, requested page, browser) to keep the site secure and to investigate faults. They are deleted after 14 days.
Analytics and cookies
With your consent, we use Google Analytics 4 to see which pages are read, how visitors move between them and where they come from, such as a search engine, a link or an email. Until you choose "Accept" in the cookie banner, nothing is sent to Google and no analytics cookie is set.
After you accept, Google Analytics sets two cookies, _ga and _ga_D08RZEGVDC, which stay in your browser for up to 2 years and tell your visits apart from other visitors' visits. It records the pages you open, the page that sent you here, your browser and device type, and your approximate location (city and country), which Google derives from your IP address. Google Analytics does not log or store the IP address itself. Advertising features and Google signals are off. The reports keep this data for 2 months.
With your consent to advertising cookies, we use Google Ads conversion measurement to see whether a visit that came from one of our Google ads led to a message: a sent store check or a click on our email address. Until you accept advertising, the Google Ads tag is not loaded. After you accept, it sets the cookies _gcl_au and, if you came from an ad, _gcl_aw, which stay in your browser for up to 90 days. It sends Google the address of the page, including the ad click ID in it, and the conversion when it happens. Google may match this with its own cookies to link the visit to the ad click. Ad personalisation is off: this measurement is not used to show you ads elsewhere.
Analytics and advertising are separate choices under "Choose" in the banner. Your choice is stored in your browser for 6 months, after which the banner asks again. Storing it sets no cookie. You can change your mind at any time with "Cookie settings" at the bottom of every page. Withdrawing consent removes the cookies of that purpose and stops further measurement.
The project brief form
When you send a brief, we receive:
- your name and email address,
- your agency or website, if you give it,
- the brief itself,
- your IP address, your browser's user agent, the page you sent it from and the time.
The brief is stored in the site's database and sent to our team mailbox. Your name and email address are also kept in the site's contact list so we can find earlier briefs from you. Please do not include passwords, access tokens or confidential client materials.
The store check form
When you ask for a free outside check of a hacked store, we receive:
- the store address, your name and your email address,
- what you see on the store and anything else you write, if you give it,
- if you came from a link with them, the Google Ads click ID (gclid) and the campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) from the page address,
- your IP address, your browser's user agent, the page you sent it from and the time.
It is stored and sent to our mailbox in the same way as a brief. The click ID and campaign parameters tell us which ad or link brought you. They are sent with the form whether or not you accepted cookies, and they are not passed on to Google. Please do not send passwords or access details in this form.
The Paidcheck Pro waitlist
When you join the waitlist on the Paidcheck page, we receive:
- your email address,
- your IP address, your browser's user agent, the page you sent it from and the time.
It is stored and sent to our mailbox in the same way as a brief. We use your address only to send you one email when Paidcheck Pro is ready, and for nothing else.
Spam protection
The Contact page, the hacked store clean-up page and the Paidcheck page use Cloudflare Turnstile to tell people from automated spam. It loads only on those pages. When you open it, Cloudflare receives your IP address, TLS fingerprint and user agent. Cloudflare processes these on our behalf to detect bots, and also uses them as a separate controller to improve its bot detection. See Cloudflare's Turnstile privacy addendum.
Why we use your data
- To read your brief or store check and reply to it: steps taken at your request before a contract (Article 6(1)(b) GDPR).
- To send you the one email about Paidcheck Pro that you asked for: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time by writing to us.
- To understand how the site is used and improve it, with Google Analytics, and to see whether our Google ads lead to messages, with Google Ads: your consent (Article 6(1)(a) GDPR), given for each separately, which you can withdraw at any time under "Cookie settings".
- To keep the form and the site free of spam and abuse, using the IP address, user agent and Turnstile signals: our legitimate interest (Article 6(1)(f) GDPR).
Apart from the one email you ask for on the Paidcheck Pro waitlist, we do not use your data for marketing, and we do not sell or share it with anyone for their own purposes.
Who else handles it
- Hetzner Online GmbH hosts the site and its database in the European Union.
- Our email provider runs our mailbox.
- Cloudflare, Inc. provides Turnstile, as described above. It transfers data to the United States under its certification to the EU-U.S. Data Privacy Framework, with the EU standard contractual clauses as a fallback.
- Google Ireland Limited provides Google Analytics as our processor, only if you accept analytics cookies. Google may transfer the data to the United States under its certification to the EU-U.S. Data Privacy Framework.
- Google Ireland Limited provides Google Ads conversion measurement, only if you accept advertising cookies. For this, Google acts as a separate controller under its own privacy policy (policies.google.com/privacy) and may transfer the data to the United States under the EU-U.S. Data Privacy Framework.
How long we keep it
A brief or store check that does not lead to a project is deleted 12 months after our last message about it. If we work together, what we need for the contract is kept for as long as the contract and our accounting obligations require.
An address on the Paidcheck Pro waitlist is deleted once we have sent that one email, or earlier if you ask us to remove it.
Your rights
You can ask us for a copy of your data, to correct or delete it, to restrict or object to its use, or to receive it in a portable form. Write to mail@measuredcode.com. We answer within one month. You can also complain to a data protection authority: in Croatia this is the Personal Data Protection Agency (AZOP, azop.hr), or the authority where you live or work.