DevDream.io Contact

Personal data and cookies

Privacy policy

This page explains what data we process when you visit devdream.io or write to us using the contact form.

Data controller

The controller of your personal data is Mateusz Szczepańczyk, running a business under the name DevDream Mateusz Szczepańczyk, ul. Bankowa 14, 42-320 Niegowa, Poland, tax ID (NIP) 5771946031, REGON 387660512. For any personal data matters, write to mateusz.szczepanczyk@devdream.io.

Contact form

We use your name, email address and message to reply and to continue the correspondence — including about possible cooperation. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Providing the data is voluntary, but the form cannot be sent without it.

The website does not store messages — they go only to our mailbox. To protect the form from spam, we keep a cryptographic hash of your IP address for one hour. Messages that do not lead to cooperation are deleted once the correspondence ends; if we sign a contract, we keep them until claims under it become time-barred.

Spam protection for the form (Cloudflare Turnstile)

When you start filling in the contact form, the page loads Cloudflare Turnstile — a service that checks whether the message is being sent by a person or a bot. It usually works invisibly; only when in doubt will it ask you to click a box above the send button. If you don’t fill in the form, your browser does not connect to Cloudflare.

To do this, Turnstile processes your IP address, information about your browser (the User-Agent header) and technical connection parameters — in order to tell people from bots, not for advertising or tracking. The legal basis is our legitimate interest in protecting the form and our mailbox from spam (Art. 6(1)(f) GDPR). Without this check, the form will not send your message — in that case you can write to us by regular email.

The service is provided by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). For the check itself, Cloudflare processes data on our behalf; on its own behalf, it also uses the data to improve bot detection — as described in the Turnstile privacy policy. Cloudflare participates in the EU-U.S. Data Privacy Framework, which the European Commission has recognized as providing an adequate level of protection.

Visitor statistics (Google Analytics)

If you accept statistics in the box at the bottom of the page, we use Google Analytics 4 to learn how many people visit the website, where they come from and which parts of it they view. Without your consent, Google Analytics is not loaded.

With your consent, Google Analytics collects, among other things:

We do not use this data for advertising — Google signals and ad personalization are turned off — and we do not combine it with data from the contact form. Detailed data is kept in Google Analytics for 2 months; aggregate reports are kept longer.

The service is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), which processes data on our behalf. Data may be transferred to Google LLC in the USA, which participates in the EU-U.S. Data Privacy Framework — recognized by the European Commission as providing an adequate level of protection.

The legal basis is your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law, Prawo komunikacji elektronicznej). You can withdraw your consent at any time using the “Cookie settings” button in the footer. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Cookies and browser storage

The website itself does not set any cookies. We remember your choice about statistics in your browser’s storage (localStorage) so that we don’t have to ask on every visit — otherwise the box would appear every time.

Cookies are set only by Google Analytics and only with your consent: _ga and _ga_YLJ5QSTGRN, valid for up to 2 years. They are used to recognize repeat visits from the same browser. You can also delete or block them in your browser settings.

Hosting and email

The website and our mailbox run on OVH servers. Like any web server, it records technical connection details in its logs — including the IP address, the time and address of the page visited and the browser type — to keep the service secure and running (our legitimate interest, Art. 6(1)(f) GDPR).

Data recipients

Only our service providers may have access to the data: our hosting and email providers, Cloudflare — when you fill in the contact form — and, with your consent, Google as part of Google Analytics. If they process data outside the European Economic Area, they do so only on the basis of an adequacy decision of the European Commission or standard contractual clauses.

Your rights

You have the right to access your data, to have it rectified or erased, to restrict its processing, the right to data portability, the right to object to processing based on our legitimate interest and the right to withdraw your consent at any time. You can also lodge a complaint with the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).

Last updated: October 17, 2026