ITTI / PRIVACY POLICYPL / EN

Privacy
policy.

What data we process when you visit itti.dev or write to us, why and for how long. No analytics, no ads, no profiling.

01Data controller

The controller of personal data processed in connection with itti.dev is:

Business name: The Cloudest Tomasz Iwanowski
Brand: ITTI
Address: ul. Bandurskiego 47B, 05-270 Marki, Poland
Tax ID (NIP): 1251739186
EU VAT ID: PL1251739186
REGON: 523341785
Register: CEIDG, the Polish business register (sole proprietorship)
E-mail: [email protected]

ITTI is the brand under which The Cloudest Tomasz Iwanowski operates. For any data protection matter, email [email protected]. We have not appointed a data protection officer, as we are not required to.

02Contact form and email

When you send a message through the form or email [email protected], we process:

your full name,
your email address,
your phone number, if you provide it (optional),
the content of your message and anything you share in it,
the date it was sent and the site version (PL or EN).

Purpose and legal basis

replying to your message and corresponding with you: our legitimate interest (Art. 6(1)(f) GDPR),
preparing a quote or arrangements before a contract, at your request: Art. 6(1)(b) GDPR,
establishing, exercising or defending legal claims: Art. 6(1)(f) GDPR.

How long

We keep correspondence for as long as needed to handle your enquiry and then for up to 12 months after the last message. If we sign a contract, related correspondence is kept for the term of the contract and the limitation period for claims.

Do you have to provide data

Providing data is voluntary, but we cannot reply without your name, email address and message. The form is protected by hCaptcha; the message is not sent until it is completed.

03Visiting the website

We do not use analytics or advertising tools and we do not profile visitors. Like any website, itti.dev is delivered by hosting and CDN servers that process technical connection data with every request: IP address, date and time, the requested page, browser and device type.

This data is used only to deliver the site, keep it secure and prevent abuse (Art. 6(1)(f) GDPR). It is processed by the providers listed in section 4 under their own log retention rules. We do not combine it with other data.

04Who receives data

We use external providers that process data on our behalf or in connection with running the site:

Provider	Role	Data
GitHub, Inc. (GitHub Pages)	website hosting	technical connection data
Cloudflare, Inc.	CDN, attack protection, domain management and forwarding of [email protected] email	technical connection data, email content
Web3Forms (web3forms.com)	delivering form messages to our inbox	form data
Intuition Machines, Inc. (hCaptcha)	protecting the form against spam	browser and captcha interaction data, IP address
our mailbox provider	storing correspondence	email messages
Google LLC / Google Ireland Ltd (Google Fonts)	fonts on demo pages and client presentation pages (see section 8)	IP address, browser data

Data may also be disclosed to bodies entitled by law, such as public authorities on request. We do not sell data or share it for marketing.

05Transfers outside the EEA

Some providers (GitHub, Cloudflare, hCaptcha, Google) are based in the USA or process data outside the European Economic Area. Transfers rely on the European Commission adequacy decision for the EU-US Data Privacy Framework (for certified companies) or on standard contractual clauses approved by the Commission. You can request a copy of these safeguards at [email protected].

06Your rights

You have the right to:

access your data and receive a copy,
have your data corrected,
have your data erased,
restrict processing,
data portability (where processing is based on a contract),
object to processing based on legitimate interest,
lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or the authority in your country.

To exercise your rights, email [email protected]. We reply without undue delay and within one month at the latest. We do not make decisions based solely on automated processing.

07Cookies and browser storage

itti.dev does not use analytics or marketing cookies. We only store settings you ask for and information needed for the site to work:

Name	Purpose	Duration
itti-theme (localStorage)	remembers your light or dark theme	until you clear it
itti-motion-off (localStorage)	remembers that you turned animations off	until you clear it
itti-intro (sessionStorage)	shows the intro animation only once per session	until the tab is closed
hCaptcha	protects the form against bots; loads only near the form	under hCaptcha rules
Cloudflare	technical security cookies, set only when Cloudflare detects suspicious traffic	up to 30 minutes

This storage is strictly necessary to provide the service you request, so it does not require consent and the site does not show a cookie banner. You can clear it at any time in your browser settings; the site will keep working without your saved settings.

08Demo pages and client work

Under /demo/ we present demo websites of fictional companies (FORMA, KURSO, NOKTA). Their forms do not send or store anything. These pages, as well as client project presentations (e.g. /siupadj/, /pan-cegielka/), load fonts from Google Fonts, so Google receives your IP address and browser data. We do not set cookies there.

09Links to other services

The site links to our apps, app stores (App Store, Google Play, Microsoft Store), Instagram, LinkedIn and client websites. Once you follow such a link, the privacy rules of that service apply.

10Changes to this policy

We update this policy when the way the site works or the law changes. The current version is always at itti.dev/en/privacy/. This version applies from 14 October 2026. The Polish version prevails in case of discrepancies.