Last updated: 8 October 2026
Who is responsible
This site belongs to measuredcode, a development studio. For any question about your data, write to mail@measuredcode.com.
Browsing the site
The site has no advertising. Fonts and images are served from this site, not from third parties. Our server keeps standard access logs (IP address, time, requested page, browser) to keep the site secure and to investigate faults; they are deleted after 14 days.
Analytics and cookies
With your consent, we use Google Analytics 4 to see which pages are read, how visitors move between them and where they come from, such as a search engine, a link or an email. Until you choose "Accept" in the cookie banner, nothing is sent to Google and no analytics cookie is set.
After you accept, Google Analytics sets two cookies, _ga and _ga_D08RZEGVDC, which stay in your browser for up to 2 years and tell your visits apart from other visitors' visits. It records the pages you open, the page that sent you here, your browser and device type, and your approximate location (city and country), which Google derives from your IP address; Google Analytics does not log or store the IP address itself. Advertising features and Google signals are off. The reports keep this data for 2 months.
Your choice is stored in your browser for 6 months, after which the banner asks again; storing it sets no cookie. You can change your mind at any time with "Cookie settings" at the bottom of every page. Choosing "Reject" removes the analytics cookies and stops further measurement.
The project brief form
When you send a brief, we receive:
- your name and email address;
- your agency or website, if you give it;
- the brief itself;
- your IP address, your browser's user agent, the page you sent it from and the time.
The brief is stored in the site's database and sent to our team mailbox. Your name and email address are also kept in the site's contact list so we can find earlier briefs from you. Please do not include passwords, access tokens or confidential client materials.
Spam protection
The Contact page uses Cloudflare Turnstile to tell people from automated spam. It loads only on that page. When you open it, Cloudflare receives your IP address, TLS fingerprint and user agent. Cloudflare processes these on our behalf to detect bots, and also uses them as a separate controller to improve its bot detection; see Cloudflare's Turnstile privacy addendum.
Why we use your data
- To read your brief and reply with a plan, a price and a date: steps taken at your request before a contract (Article 6(1)(b) GDPR).
- To understand how the site is used and improve it, with Google Analytics: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time under "Cookie settings".
- To keep the form and the site free of spam and abuse, using the IP address, user agent and Turnstile signals: our legitimate interest (Article 6(1)(f) GDPR).
We do not use your data for marketing and we do not sell or share it with anyone for their own purposes.
Who else handles it
- Hetzner Online GmbH hosts the site and its database in the European Union.
- Our email provider runs our mailbox.
- Cloudflare, Inc. provides Turnstile, as described above. It transfers data to the United States under its certification to the EU-U.S. Data Privacy Framework, with the EU standard contractual clauses as a fallback.
- Google Ireland Limited provides Google Analytics as our processor, only if you accept analytics cookies. Google may transfer the data to the United States under its certification to the EU-U.S. Data Privacy Framework.
How long we keep it
A brief that does not lead to a project is deleted 12 months after our last message about it. If we work together, what we need for the contract is kept for as long as the contract and our accounting obligations require.
Your rights
You can ask us for a copy of your data, to correct or delete it, to restrict or object to its use, or to receive it in a portable form. Write to mail@measuredcode.com; we answer within one month. You can also complain to a data protection authority: in Croatia this is the Personal Data Protection Agency (AZOP, azop.hr), or the authority where you live or work.