What happens to what you send us
This site has one form and one visit counter. This page says who reads what you send, who else it passes through, how long it stays, and how to make it go away. It is the Article 13 notice, written to be read rather than to be survived.
Who is responsible
Strojno is the trading name of Kir Artemov s.p., a sole trader registered in the Republic of Slovenia. We decide why and how the data described on this page is handled, so under the GDPR we are the controller for it.
Write to hi@strojno.com about anything on this page, including the requests in section 07. The same address reaches us for everything else.
We have not appointed a Data Protection Officer. Article 37 does not require one here: we are one person, we monitor nobody at scale, and we handle no special categories of data.
What we collect, and mostly only when you send it
Reading this site leaves one anonymous record of the page you opened. It carries no name, no address and nothing that survives the day, and section 08 lists every field in it.
Everything else reaches us only because you decided to send it, in one of three ways.
- The mini-brief at /start
- Three fields are required: your name, your work email and the pain you want solved. Everything else on that form is optional and you can leave it blank: company, team size, what you are after, how briefs run today, the tools in the mix, your messiest brief, timing, a budget band and any notes. Free-text fields hold whatever you decide to write in them.
- Email you send us
- Your address, whatever you write and anything you attach.
- A call you book yourself
- The booking link on this site goes to Cal. If you book, you give your details to Cal, and Cal handles them under its own privacy notice. We see the booking.
We do not buy contact data, we do not enrich what you send with data from anywhere else, and we do not ask for special categories of personal data under Article 9. Please do not put any in the free-text fields.
Why we hold it, and on what legal basis
This section is about your enquiry, and there the purpose is one: to read it, write you an answer within 48 hours, and arrange a call if you want one. That is the whole of it.
Counting visits is a separate purpose with its own basis, and it never touches what you send. It is set out in section 08, where the counting itself is described.
- Steps before a contract — Article 6(1)(b)
- You asked us for something. Answering you, quoting for the work and setting up the call are steps taken at your own request before any contract.
- Our legitimate interest — Article 6(1)(f)
- Where an enquiry never turns into a contract, we still need to answer it and to keep a record of what was said and quoted. The interest is running a business that answers the people who write to it. It is a light interest and it does not override you, which is why you can object at any time under Article 21 and why we delete on request.
We do not rely on consent for any of this, so there is nothing for you to withdraw. If we ever want to use your data for something new, we will ask first, and asking will mean asking.
Who else it passes through
Four suppliers touch the data on its way to us. Each one is bound by a data processing agreement, each one handles it only on our instructions, and none of them may use it for anything of their own.
| SUPPLIER | WHAT IT DOES WITH YOUR DATA |
|---|---|
| Vercel | Hosts strojno.com and runs the code that receives the form, in the Frankfurt region. The submission passes through that server function and appears in short-lived server logs, so that a message is never lost if the email fails. Vercel also runs the visit counter described in section 08 — the same company that already serves you every page, not a new one added on top. |
| Resend | Delivers two emails: the one that reaches us, and the confirmation that reaches you. Sent from Resend's EU region. |
| Spacemail | The mailbox behind hi@strojno.com, where we read your message and write the reply. |
| Cal | Only if you book a call yourself. Cal never sees the mini-brief. |
That is the complete list, and it is four names, not five: the visit counter is Vercel's own and adds nobody. There is no advertising network, no data broker, no CRM and no third-party tracking pixel. We do not sell your data, we do not share it for anyone else's marketing, and we do not use it to train any model.
Where the law obliges us to hand something over to a court or an authority, we will. Nothing else leaves.
Whether it leaves Europe
The site, the code that receives the form and our mailbox all run in the EU. Some of the suppliers above are companies established outside the EEA, and their staff and their support systems can reach data from there.
Where that happens, the transfer runs on the European Commission's standard contractual clauses in that supplier's own data processing terms, together with the measures each supplier commits to alongside them. Ask us and we will tell you which mechanism applies to which supplier at the time you ask.
How long it stays
| WHAT | HOW LONG |
|---|---|
| Your mini-brief and the emails between us | Up to 24 months after we last spoke, then deleted. Sooner if you ask. |
| Server logs at the hosting provider | Short-lived. They roll off on the provider's own schedule, which we do not control beyond choosing the provider. |
| If you become a client | For as long as the contract runs. Invoices and the accounting documents around them are kept for the period Slovenian tax and accounting law sets, which is longer than we would otherwise keep anything. |
A quote we sent and the enquiry it answered are kept together. That is the record we would need if either of us ever had to show what was agreed.
What you can make us do
The GDPR gives you these rights over the data described here. Use any of them by writing to hi@strojno.com. We answer within one month, and we will not ask you to prove who you are unless we genuinely cannot tell.
- Access — Article 15
- Ask for a copy of everything we hold about you.
- Rectification — Article 16
- Get anything wrong or incomplete corrected.
- Erasure — Article 17
- Have it deleted. Unless a tax record has to survive, this is a yes.
- Restriction — Article 18
- Have us stop using it while something is being sorted out.
- Portability — Article 20
- Get what you gave us in a machine-readable file.
- Objection — Article 21
- Object to the legitimate-interest basis in section 03. Say the word and we stop.
Nothing here is decided about you by a machine. There is no automated decision-making and no profiling under Article 22: a person reads every message and a person writes every answer.
How visits are counted, and why there is still no banner
Visits are counted, and until 1 August 2026 this page said they were not. They now are, so the page says so. Three numbers are wanted and no more: how many people open the mini-brief at /start, how many send it, and how many ask for a call.
The counter is Vercel Web Analytics, run by the company that already hosts this site. It sets no cookie, writes nothing to your device and reads nothing from it. That is the whole reason there is no banner: consent is what you give before something is stored on your machine, and nothing is stored on your machine.
| WHAT EACH VISIT RECORDS | IN PRACTICE |
|---|---|
| The page, and when | The address you opened, in the form /pricing, and the moment you opened it. |
| Where you arrived from | The site that linked to you, if there was one, and any campaign tags carried in the address. |
| Roughly where you are | Country, region and city, worked out from the connection. Your IP address itself is not kept. |
| What you are reading on | Device type, browser and operating system, each with a version number. |
| Two actions | That someone sent the mini-brief, and that someone clicked the booking link. Both are bare counts and carry no field from the form. |
What is not in there: your name, your address, any cookie, any identifier that outlives the day. To keep from counting one visit twice, Vercel derives a short-lived fingerprint from the request itself and discards it within 24 hours. None of it can be joined to your enquiry, and none of it can follow you to another website.
The basis is our legitimate interest under Article 6(1)(f) — knowing whether a page is read before writing the next one. Because these records identify nobody, we cannot pick yours out to delete, and for the same reason there is nothing in them that is about you. If you would rather not be counted at all, any content blocker stops the script, and the site behaves exactly as it does now.
Your light or dark theme choice is stored in your browser's own storage. It stays on your device, it never reaches us, and it identifies nobody.
One cookie exists on this domain. It is the login session for the private area behind /internal, which is for the studio's own use and which a visitor never touches. That area is left out of the count as well.
If you think we got this wrong
Tell us first, at hi@strojno.com — it is faster and we would rather fix it than argue about it.
You can also complain to a supervisory authority, and you do not have to talk to us before you do. Ours is the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, www.ip-rs.si. You may instead go to the authority where you live or work.
Do you have to give us anything? No. No law and no contract obliges you to fill in the form. Without the three required fields we cannot write back to you, which is the only consequence there is.
The date at the top moves and the new version replaces this one. We will not change it quietly to cover something we have already done.