Privacy policy

Data controller

The controller of your personal data is Noothropic sp. z o.o., ul. Stanisławowska 47, 54-611 Wrocław, Poland, entered in the National Court Register under KRS 0001221668, tax ID (NIP) 8943279020.

For anything about your personal data, write to contact@noothropic.com.

What data we process

The contact form sends us your name, email address, message and, if you give it, your company name. The same data reaches us when you write to our email address directly.

The server that runs the site logs technical data about each request, including the IP address and browser type. The IP address also limits how many messages one address can send within 10 minutes. For that it is held only in the server's memory and never written anywhere.

With your consent, Google Analytics also collects an identifier stored in cookies and data about your visit: the pages you view, where the visit came from, approximate location derived from your IP address (Google states that it does not store the address itself), device and browser. It also records what you do on the site: clicks on contact and external links, copying our email address, starting and sending the form, form errors, file downloads, scrolling to near the end of a page and reading progress in articles. We do not send the form's content, your name or your email address to Google. Without consent the Google script does not load.

Purpose and legal basis

Giving us your data is voluntary, but without an email address we cannot reply. We make no automated decisions. We do not use analytics data for advertising or to identify individual people.

• Replying to your message and discussing work before a contract: Art. 6(1)(b) GDPR.
• Keeping correspondence, preventing abuse, and establishing or defending legal claims: our legitimate interest, Art. 6(1)(f) GDPR.
• Security and operation of the site (server logs): our legitimate interest, Art. 6(1)(f) GDPR.
• Measuring traffic and seeing which content brings enquiries (Google Analytics): your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time, which does not affect the lawfulness of processing before withdrawal.

How long we keep data

We keep correspondence while the conversation lasts and, if no work follows, for at most 12 months after the last contact. If we sign a contract, we keep the data for its duration and the limitation period for claims. The hosting provider deletes server logs automatically.

We keep detailed Google Analytics data for up to 14 months, and aggregated reports may stay available for longer. Google Analytics cookies expire 12 months after your last visit. Your consent choice stays valid for 12 months. After that, we delete it on your next visit and ask again.

Who receives the data

We do not sell data or pass it to other companies for marketing. We use providers who process data on our behalf:

• Vercel Inc.: site hosting and server logs.
• Resend (Plus Five Five, Inc.): sending form messages and the confirmation to the sender.
• Google Cloud Poland sp. z o.o.: the Google Workspace email inbox where we keep correspondence.
• Google Ireland Limited: traffic measurement in Google Analytics, only after you consent.

Vercel and Resend are based in the United States, and Google may transfer data to Google LLC there. These transfers rely on the European Commission's adequacy decision (EU‑US Data Privacy Framework) or standard contractual clauses approved by the Commission.

Cookies

The site sets the NEXT_LOCALE cookie, which holds the site language until the browser session ends, and a noothropic-consent entry in your browser's local storage, which holds your Google Analytics choice. Both exist only to remember these settings, so they need no consent.

Only with your consent, Google Analytics sets two cookies: _ga, and _ga_ followed by our site's Google Analytics ID. They tell visitors and their visits apart, and expire 12 months after your last visit.

You can change your choice at any time through the Cookie settings link in the site footer. To withdraw consent, choose Reject there: we then delete the _ga and _ga_ cookies and Google Analytics stops running. Data collected earlier stays in Google Analytics until its retention period ends.

We use no advertising cookies, and fonts are served from our own server, with no requests to Google.

Your rights

You have the right to access, correct, erase and port your data, to restrict its processing, and to object to processing based on our legitimate interest. Just write to contact@noothropic.com. You can withdraw consent to Google Analytics at any time through the Cookie settings link in the site footer.

You can also lodge a complaint with the Polish data protection authority, Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00‑193 Warsaw.

Changes to this policy

When we change how we process data, we will update this page and the date at the top.