Privacy, in plain language.

Who is responsible

Danil Galeev, trading as Made By Expert is responsible for the personal data processed through this website.

Peter-Behrens-Str. 1A, 14469 Potsdam, Germany

For privacy questions, access requests or deletion, email [email protected].

What we collect and why

• Inquiries. Your name, email, message and submission time let us respond and discuss the services you requested. Where you request steps toward a contract, we rely on Article 6(1)(b) GDPR; for other business inquiries, our legitimate interest in answering your request under Article 6(1)(f). Sending an inquiry does not subscribe you to marketing. You may also tell us how you found us so we can understand which channels bring inquiries. Older inquiries may include an optional service tier.
• Launch list. With your consent under Article 6(1)(a), we keep your email to send one update when we open for new projects. We record the consent wording, notice version and acceptance time. Joining is optional and consent can be withdrawn at any time.
• Site operation. The server processes your IP address and request details to deliver the website and prevent abuse, based on our legitimate interest in operating a secure service. The application uses short-lived hashed IP identifiers to limit repeated submissions.

Fields marked as required are necessary to handle that request. If you do not provide them, you can still browse the site. Please avoid sending sensitive personal information in your message.

Who processes the information

Our hosting provider processes website requests and stores submissions on our server. The people handling your inquiry receive a notification through our email service providers. We use Resend to send these notifications; they contain the details you submitted.

Resend processes data in the United States. Its Data Processing Addendum provides Standard Contractual Clauses for relevant transfers outside the EEA. You can ask us for information about the safeguards applicable to your data. Our receiving email provider also processes notification copies.

We do not sell your personal data. We may disclose information when required by law. This website does not use automated decision-making or profiling about you.

How long we keep it

Website inquiry and launch-list records are removed from the active intake database after 365 days. You can request earlier deletion or withdraw launch-list consent. If an inquiry becomes a client relationship, necessary contract records are handled separately for the applicable contractual and legal purposes.

Local intake backups are kept for up to 30 days. Our deletion procedure covers the active database, queued notifications and these local snapshots. Copies already sent to email providers or our mailbox need separate removal; we include them when handling your request, subject to applicable legal requirements.

Application rate-limit identifiers expire after ten minutes and are cleared within an hour. Hosting and operational logs are used to diagnose incidents and protect the service; their retention is managed separately from the intake database.

Cookies and browser storage

We do not use advertising cookies, analytics trackers or third-party font services on this site. If you choose a light or dark theme, your browser remembers that preference locally until you clear the site’s browser data. This preference is not used to identify or track you.

External links, such as our X profile, take you to services with their own privacy policies.

Your choices and rights

You can request access, correction, erasure, restriction and, where applicable, a portable copy of your data. You can object to processing based on legitimate interests and withdraw launch-list consent without affecting the lawfulness of earlier processing.

To withdraw, request deletion or exercise another right, email [email protected], preferably from the address you used on the form. We may ask for proportionate information to verify the request. We normally respond within one month; if a lawful extension is needed, we will explain it within that first month.

You can also complain to a supervisory authority, particularly in the EEA country where you live, work or consider an infringement occurred. The European Data Protection Board directory lists the authorities.

Changes to this notice

We will update this page when our processing changes. A different use of your launch-list email will require an appropriate legal basis; your current choice covers only the launch update described above.