Privacy Policy
Last updated: 20 June 2026
This Privacy Policy explains how shadowforge collects, uses and protects your personal data when you visit shadowforge.app or contact us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Law No. 133/2011 of the Republic of Moldova on the protection of personal data.
1. Data controller
The controller of your personal data is DUMITRU SOLIC, registered as an independent activity in the Republic of Moldova (A.I. DUMITRU SOLIC), IDNO 1026023045210, based in Chișinău, Republic of Moldova, operating the website shadowforge.app.
For any privacy-related request, contact us at hello@shadowforge.app.
2. What data we collect
Data you give us — when you submit the contact form or email us: your name, email address, indicated budget range and the content of your message. We only ask for what is needed to reply to you.
Data collected automatically — with your consent, our analytics tools collect technical and usage data: a truncated/anonymised IP address, device and browser type, language, referring page, pages visited and interactions. Yandex Metrica (Webvisor) may record an anonymised replay of your session (mouse movements, clicks, scrolling and navigation).
Server logs — our hosting provider automatically records technical access data (IP address, user agent, timestamps) needed to operate and secure the website.
3. Purposes and legal bases
To respond to your enquiries and prepare a possible cooperation — basis: steps taken at your request prior to a contract (GDPR Art. 6(1)(b)).
To measure and improve the website via analytics — basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.
To operate and secure the website against abuse — basis: our legitimate interest (GDPR Art. 6(1)(f)).
To comply with legal obligations where applicable — basis: GDPR Art. 6(1)(c).
4. Cookies
We use cookies and similar technologies. Strictly necessary ones keep the site working and remember your cookie choice; analytics cookies load only after you consent. Full details and controls are in our Cookie Policy.
5. Who we share data with
We rely on trusted providers that process data on our behalf:
- Vercel Inc. (USA) — website hosting and delivery.
- Google — Google Tag Manager and Google Analytics (analytics), only with consent.
- Yandex — Yandex Metrica (analytics, incl. Webvisor), only with consent.
- Telegram — contact-form notifications are delivered to our Telegram so we can reply quickly.
We never sell your personal data.
6. International data transfers
Some providers are located outside the Republic of Moldova and the European Economic Area (e.g. in the USA). Where data is transferred internationally, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses and the providers' own data-protection commitments.
7. How long we keep your data
- Contact enquiries — for as long as needed to handle your request and the subsequent business relationship, and up to 24 months afterwards, unless a longer period is required by law.
- Analytics data — for the retention period set in each tool (typically 14–26 months), after which it is aggregated or deleted.
- Server logs — for a short period needed for security and diagnostics.
8. Your rights
Under the GDPR and Law 133/2011 you have the right to: access; rectification; erasure (the "right to be forgotten"); restriction of processing; data portability; objection; withdrawal of consent at any time (without affecting prior processing); and not to be subject to a decision based solely on automated processing.
To exercise any right, email hello@shadowforge.app. We respond within the legal deadline (normally one month).
9. Right to complain
If you believe we process your data unlawfully, you may lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova (datepersonale.md). If you are in the EU/EEA, you may also contact your local data-protection authority.
10. Data security
We protect your data with technical and organisational measures: encrypted connections (HTTPS), restricted access and trusted providers. No method of transmission over the Internet is 100% secure, but we work continuously to protect your data.
11. Children
The website is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. The current version and its date are always published on this page; significant changes will be highlighted.