Privacy policy

13DEVS sp. z o.o., Warsaw Spire, Plac Europejski 2, 00-844 Warszawa, Poland. District Court for the Capital City of Warsaw, XIII Commercial Division of the National Court Register, KRS 0000957322, NIP 5213958209, REGON 521384767, share capital PLN 10,000.00.

For anything about your personal data, use the contact form on this site or write to contact (at) 13devs.com, or call +48 22 247 21 29. We have not appointed a data protection officer.

Purpose: replying to your message and, if it comes to that, talking about working together. Legal basis: our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Data: name, email address, company (if you give it), your message and the language of the page. Giving them is voluntary, but without a name, an email address and a message we cannot reply.

Who processes it for us: the form is handled by the Forminit service (UXPLUS LTD, London, United Kingdom), which stores submissions on AWS servers in the European Union and notifies us by email. With each submission Forminit also records technical data: IP address, browser information, the page the form was sent from and an approximate location. The notification reaches our mailbox run by Zoho (Zoho Corporation B.V., the Netherlands) in a data centre in the European Union.

How long: up to 12 months after the last message if no work follows. If it does, correspondence is kept as long as the contract and the law require.

We do not ask for consent at the form. We send no automatic replies and no newsletter.

If you click “Accept” or tick a tool in Privacy settings, we load:

• Google Analytics 4 (Google Ireland Limited): visit statistics — which pages, for how long, on what kind of device. Google signals and ad personalisation are off. Event data is kept for 2 months. According to Google, IP addresses of users in the EU are not stored.
• Microsoft Clarity (Microsoft Ireland Operations Limited): how the page is scrolled and clicked, including session recordings and click maps. Form field content is masked, and the whole contact window is masked in recordings. According to Microsoft, recordings are kept for 30 days, and recordings we mark or that are randomly sampled for up to 9 months.

Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law). Without consent neither tool loads and the site works the same. You can withdraw consent at any time with “Privacy settings” in the footer. Withdrawal does not affect what happened before it.

The site is hosted by dhosting.pl Sp. z o.o. (Warsaw) on servers in Poland. The server logs the IP address, time, requested address and browser information to keep the site running securely. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). The hosting provider keeps the logs for the period set in its terms, and we do not use them for any other purpose.

name	type	what for	how long
13devs-theme	localStorage	light or dark theme, when you change it	until you clear the browser
lang	cookie	language, when you pick it with the EN | PL switch	12 months
13devs-best	localStorage	best score in the hidden game, if you play it	until you clear the browser
13devs-consent	localStorage	your analytics choice: policy version, date, tools chosen	until the policy version changes or you clear the browser
_ga, _ga_*	Google Analytics cookies	telling visits apart, only after consent	up to 13 months
_clck, _clsk	Microsoft Clarity cookies	joining page views into a session, only after consent	up to 12 months / 1 day
MUID, CLID, ANONCHK	Microsoft cookies on clarity.ms / bing.com	set by Microsoft after consent to Clarity; removed in your browser settings	set by Microsoft

The first four are strictly necessary for something you asked for (theme, language, game, remembering your choice), so they need no consent (Art. 399(2) of the Electronic Communications Law). Fonts are served from our own server; we do not connect to Google Fonts. The LinkedIn link leads to an external page and is not a plug-in.

We do not sell data or share it with other companies for their own purposes. The only recipients are processors acting for us under data processing agreements (Art. 28 GDPR): hosting, Forminit, the email provider and, after your consent, Google and Microsoft. We disclose data to public authorities only where the law requires it.

Forminit is based in the United Kingdom, for which the European Commission has adopted an adequacy decision. Google and Microsoft may transfer data to the United States on the basis of the European Commission's decision on the EU-US Data Privacy Framework (2023/1795), in which they participate, and of standard contractual clauses.

You have the right to access your data, to have it corrected or erased and to restrict its processing. You may object to processing based on legitimate interest (the form, server logs). You can withdraw consent to analytics at any time, and receive data processed on that basis in a portable format where we hold it in a way that identifies you.

You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO, uodo.gov.pl).

We make no decisions about you based solely on automated processing and do not profile you.

Every change gets a new version number (at the top of this policy); if it concerns analytics, we ask for consent again.