Privacy Policy

Who is responsible

This website is operated by No Stress Studio, a sole trader based in Poland, EU. Controller of any personal data collected through this site: No Stress Studio, contact kontakt@nostressstudio.com.

What we collect

This marketing site uses analytics and session-analysis tools only after you give consent. No account system is used. Contact forms send the data you enter to our CRM intake endpoint, and the EAA audit form sends it through Web3Forms, so we can reply to the request; email links open your own email client via mailto.

When you send a form or email, we store your email address, message, submitted URL and request type for the purpose of replying and managing the business relationship (Art. 6(1)(b) and (f) GDPR). Messages are kept as long as the conversation is active plus reasonable business-record retention, then deleted.

Third-party services

Hosting: Cloudflare Pages hosts the static site and logs request metadata for abuse prevention. Cloudflare provides Standard Contractual Clauses for GDPR-compliant data transfer.

Lead intake: Cloudflare Workers and Web3Forms receive form submissions, apply abuse protection, and forward lead metadata so we can respond. Brevo may send the confirmation email, and Telegram may notify the site owner about the new lead.

Fonts: Space Grotesk, Fraunces and JetBrains Mono are self-hosted from this domain via font packages. We do not use external font CDNs.

Analytics and consent

We use two third-party tools to understand how visitors use this site. They are loaded only after you click Accept in the cookie banner. Until you consent, no analytics or session-recording scripts run, and no related cookies are set. Legal basis: your consent (Art. 6(1)(a) GDPR; Section 25 TDDDG for storage/access on your device).

Google Analytics 4 (GA4). Provider: Google Ireland Limited, with processing also by Google LLC, USA. Purpose: aggregate statistical measurement of site usage. We run GA4 in Consent Mode v2 with advertising features disabled. Data transfer to the USA is covered by Google LLC certification under the EU-US Data Privacy Framework and EU Standard Contractual Clauses.

Microsoft Clarity. Provider: Microsoft Ireland Operations Limited / Microsoft Corporation, USA. Purpose: session analysis, heatmaps and anonymised recordings of page interactions. Text input fields are masked, so form input is not recorded. Data transfer to the USA is covered by Microsoft certification under the EU-US Data Privacy Framework and EU Standard Contractual Clauses.

You can change or withdraw your consent at any time through Privacy settings in the site footer. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Your rights

Under GDPR you have the right to access the data we hold about you, have it corrected or deleted, restrict or object to processing, receive a portable copy, and lodge a complaint with a supervisory authority. In Poland this is UODO, uodo.gov.pl. To exercise any of these rights email kontakt@nostressstudio.com.

Changes

This policy may be updated as the site evolves. The version in force is the one published at this URL. Last updated: 2 July 2026.