Privacy policy

This page explains what data we process when you visit strigy.com, send us an enquiry or fill in the questionnaire, why we do it, who processes it on our behalf and what your rights are under the General Data Protection Regulation (GDPR).

Data controller

The data controller is ĆUVITA, obrt za usluge, registered office in Trogir, Croatia. Strigy Studio is the name under which we provide our services. For any question about your data, write to us at info@strigy.com. The other details of the business are in the Imprint.

Enquiries sent through the contact form

From the form we receive what you enter: your name, email and project description, and, if you add them, your phone, company, project type and preferred timeline. Name, email and description are required, because without them we cannot reply. The enquiry also carries the page you sent it from and where you came to strigy.com from: the name of that site, for example google.com, or a campaign tag from the link. None of this is stored in your browser.

The enquiry is handled by a server function of this site. It emails the enquiry to us, sends you a confirmation with a summary of your enquiry and forwards it to our internal system, where it becomes a client record and a project. The same system also keeps the emails we exchange with you, in full.

To keep the form from being flooded, the function accepts at most three enquiries an hour from the same IP address and sends at most two confirmations an hour to the same email address. For this it keeps the IP address and the email address with the time of sending in working memory only, not on disk and not in a database. A record older than an hour is deleted with the next submission, and all records disappear when the function shuts down.

If sending through our function fails, the form on the home page uses a fallback: it sends the enquiry directly from your browser to the Web3Forms service, which delivers it to us by email.

Questionnaire

The questionnaire on admin.strigy.com saves your answers as you type, but only in your browser, not on our side. They reach us only when you submit the questionnaire, and are then deleted from the browser. Unfinished answers stay in the browser until you submit the questionnaire or clear your browser data.

We keep submitted answers in our internal system and receive an email notification about them. When you open the questionnaire from our site or another site, we also record which site you came from. We use the answers the same way as an enquiry: to reply and to prepare a quote.

Preparing a quote

When we prepare a quote, we may send the description from your enquiry and your questionnaire answers, together with your name or company name, town and the address of your current website, to the Claude model by Anthropic. It helps us write the text of the quote and the list of work. We start this ourselves, for a specific quote, never automatically. What the quote says and what it costs is decided by us. When we ask our internal system a question about the business, Claude may also receive basic details about clients and projects, such as a name or company, town and project status.

Client portal

When we work with you on a project, we may open a portal for you: a single page on admin.strigy.com that you reach through a secret link. It shows the project progress and schedule, the status of the quote and contract, and the payment plan with amounts and, where we upload them, invoices as PDFs. It does not show our internal notes, hours or costs. We switch the portal on for each project and we send the link ourselves, never automatically. We can switch the link off or replace it with a new one at any time, and the old one then stops working.

The portal page sets no cookies, uses no analytics and is not indexed by search engines. An invoice is downloaded through a short-lived link that works for 60 seconds. We show this data to perform our contract with you (Article 6(1)(b) GDPR), and it is processed by the same providers as the rest of our internal system, Vercel and Supabase.

Legal basis

We process enquiries and questionnaires to take steps at your request before entering into a contract, that is, to reply to you and prepare a quote (Article 6(1)(b) GDPR). This processing is not based on consent. The limit on submissions is based on our legitimate interest in protecting the form from abuse (Article 6(1)(f)). We use analytics only with your consent (Article 6(1)(a)), which you can withdraw at any time by clicking “Cookie settings” in the footer.

Who else processes the data

We do not sell your data or give it to anyone for marketing. It is processed only by the service providers we use to run the site and the studio, and only on our instructions:

• Vercel Inc. (USA): hosting of strigy.com and the function that handles enquiries from the form, which runs in the USA. Vercel also hosts our internal system admin.strigy.com, whose functions run in Frankfurt.
• cyber_Folks (Croatia): the mail server mail.strigy.com, which sends the enquiry and the confirmation.
• Google (Google Workspace): the info@strigy.com mailbox, which receives enquiries and other email.
• Supabase Inc. (USA): the database of our internal system, with clients, projects, questionnaires and email. The database is in Frankfurt.
• Anthropic, PBC (USA): the Claude model, when we start it while preparing a quote or asking a question about the business.
• Web3Forms (India): only the fallback for the form on the home page, when sending through our function fails. Under its own rules it keeps submitted data for up to three years.
• Google (Google Analytics) and Microsoft (Microsoft Clarity): analytics, only after your consent.

For transfers outside the European Economic Area: Vercel, Google and Microsoft are certified under the EU-U.S. Data Privacy Framework, and transfers to Supabase, Anthropic and Web3Forms rely on the European Commission’s standard contractual clauses in their data processing agreements.

Analytics and cookies

On your first visit a bar appears with a choice of “Accept” or “Essential only”. Until you click “Accept”, the site loads no analytics tool and sets no cookies. We remember your choice in your browser under the name strigy-cookies. This is not a cookie but an entry in the browser’s local storage that is not sent anywhere, and it is needed so the bar does not ask you on every visit.

After “Accept” two tools load. Google Analytics measures traffic: which pages you view, for how long, on which device and where you came from. Microsoft Clarity records mouse movement, clicks and scrolling and turns them into heatmaps and session recordings. Clarity does not record what you type into form fields. Google and Microsoft also process this data under their own privacy rules (Google, Microsoft).

The strigy-cookies and _cltk entries are not cookies: the first is kept in the browser’s local storage and the second in session storage. You can change your decision at any time by clicking “Cookie settings” in the footer. Fonts are served from our own site, not from external services.

How long we keep data

• An enquiry that does not lead to a project: 12 months from the last contact, after which we delete it.
• Project data (client, project, quotes and correspondence): for as long as we work together and 5 years after the project ends. Invoice data is kept for as long as tax and accounting rules require.
• Questionnaire answers: as long as the enquiry or project data they were sent with.
• Records for the submission limit: an hour at most, in the function’s working memory only.
• Analytics data: Google Analytics keeps it for 14 months at most. Clarity keeps session recordings for 30 days, and recordings we mark plus a random sample of recordings for up to 9 months. Cookies last as long as the table says.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict its processing and to data portability, the right to object to processing based on legitimate interest, and the right to withdraw your consent to analytics at any time. To exercise any of these rights, write to us at info@strigy.com. We reply within one month at the latest.

If you believe your data is not processed in line with the law, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), the supervisory authority in Croatia.

Last updated: October 2026.