How I handle your data
What I collect — and what I don't
This site runs no analytics, sets no tracking cookies, and collects nothing until you choose to send it. When you do, here's exactly what happens to it.
The whole notice, in plain terms.
The short version
Almost nothing, and only what you send me
Most privacy notices are long because the site behind them is busy collecting. This one is short for the opposite reason. Here's the whole thing, point by point.
01What I collect
When you fill in the application form, you send me four things: your name, your email, your website (optional), and a short message about what's changing in your business. That's it — no account to create, no newsletter sign-up, no hidden fields. Separately, like every website, the server that hosts this site keeps standard access logs, including your IP address, to stay secure and running. I don't use those logs to build any profile of you.
02Why I collect it
One reason: so I can read your application and reply. You're asking about working together, so handling your details is part of taking the first steps toward a possible project — in GDPR terms, the lawful basis is Article 6(1)(b) (steps prior to a contract), alongside a legitimate interest in running the studio and answering the people who write in. I don't sell your data, share it for marketing, or use it to advertise to you anywhere.
03Where it goes
The form is handled by Netlify, which hosts this site and stores each submission so I can read it. Netlify is a US company and processes the data under the standard EU transfer safeguards (Standard Contractual Clauses). When I reply, your message sits in my email inbox like any other. That's the entire list of who touches your data: Netlify, my email provider, and me. No one else.
04How long I keep it
If we don't end up working together, I delete your application within 24 months of our last contact. If we do, I keep what the project and my records need, then delete it once it's no longer needed. You can ask me to delete it sooner at any point — see your rights below.
05Cookies and tracking
None. No analytics, no advertising pixels, no third-party trackers — and no cookie banner, because there's nothing to consent to. The site stores one small technical flag in your browser (sessionStorage) purely to play the page-to-page transition animation. It holds no personal data, is never shared, and clears the moment you close the tab.
06Your rights
Under the GDPR you can ask me to show you what I hold, correct it, delete it, restrict or object to how I use it, or send it to you in a portable form. Email me and I'll action it — there's very little to action — without making you jump through hoops.
07If you're not happy
If you think I've mishandled your data, I'd rather you tell me first so I can fix it: contact@alinbloj.com. You also have the right to complain to a data-protection authority. In Romania, where I'm based, that's the National Supervisory Authority for Personal Data Processing (ANSPDCP) — dataprotection.ro.
08Changes to this notice
If anything here changes, I'll update the date at the top of this page. I won't quietly start collecting more than what's described here — if the practice ever changes, the change shows up here first.
Who's responsible
This site and the data described above are handled by Alin Bloj, trading as Transition Studio, based in Târgu Mureș, Romania. Questions about any of this go to contact@alinbloj.com — a real inbox I read personally.
In effect from 15 July 2026