METABYTE
TelegramDiscuss your project

Privacy Policy

Updated: July 23, 2026

This document explains what data mtbyte.io collects, how we use it, and your rights. Compliant with GDPR (EU 2016/679), ePrivacy Directive, and Moldova Law No. 133/2011 on Personal Data Protection.

1. Data controller

Controller: METABYTE (sole proprietor: Vladimir Melincean), Republic of Moldova. Contact: vm@metabyte.md, Telegram @metabytemd.

2. What we collect

Technically, when the site is requested:

  • IP address and User-Agent in server logs (security and anti-flood protection)
  • Country code from an infrastructure header, when available, to select the language; stored in the user-country cookie

Only with analytics consent:

  • Pages visited, visit duration, and scroll depth
  • A pseudonymous visitor identifier in localStorage, retained for up to 1 year

When you submit a contact form or project request:

  • Name
  • Email or Telegram
  • Project type and description
  • Selected budget range
  • Consent to processing

3. Purposes and legal basis

  • Project communication and proposal preparation — Art. 6(1)(b) GDPR (pre-contract steps at your request) and 6(1)(a) (consent on form submission)
  • Site analytics — Art. 6(1)(a) (your cookie-settings consent)
  • Security and anti-flood protection — Art. 6(1)(f) (legitimate interest)

4. Data sharing

We do NOT sell your data. Data may be shared only with processors required to operate the site:

  • Telegram Bot API (Telegram FZ-LLC, UAE) — operator notifications about new requests
  • Supabase / Postgres (eu-west-2) — request and analytics storage
  • Pexels (Pexels GmbH, Germany) — illustration delivery; visitor personal data is not included in search queries
  • OVH (France) — VPS hosting and technical logs

5. Retention

  • Analytics and access logs — up to 12 months
  • Pre-contract request data — up to 24 months or until consent is withdrawn, unless the law requires otherwise
  • Contract records — for the periods required by applicable accounting and tax law
  • Pseudonymous visitor_id in localStorage — up to 1 year

6. Your rights (GDPR)

  • Access — know what data we hold about you
  • Rectification
  • Erasure ("right to be forgotten")
  • Restriction of processing
  • Portability — receive your data in a machine-readable format
  • Objection — to processing based on legitimate interest
  • Withdraw consent — anytime, no impact on past processing

To exercise — write to vm@metabyte.md or @metabytemd. We respond within 30 days.

You may also lodge a complaint with the supervisory authority (EU: DPA in your country; Moldova: National Center for Personal Data Protection, datepersonale.md).

7. Cookies

Details — on Cookie Policy. In short: only necessary cookies + first-party analytics (no Google Analytics or third-party trackers).

8. Security

The site connection is protected with TLS. The database and server are hosted in European regions (eu-west-2 / France). Access to requests is restricted to the operator and technical accounts required to run the site.

9. Changes

We may update this policy. Material changes — announced on the homepage at least 14 days in advance.