Privacy and cookies

Who is responsible

Code arc, MB is the controller of your personal data. You can reach us at info@codearc.io or +370 650 24100.

What we collect and why

• Contact form: your name, email address, phone number (if you give it), the topic and your message, the page's language and the time you sent it. We use them only to answer you. When you ask about work, this is a step you ask for before a contract (GDPR art. 6(1)(b)); for any other question it is our legitimate interest in answering the people who write to us (art. 6(1)(f)).
• Quick website check: the public website address you submit, your email, permission confirmation, language and submission time. We use these to perform the check you request, display and email its report, and follow up about that report. The request and generated observations are saved with our enquiries. We do not save the checked page’s body or cookie values. We do not add you to a newsletter.
• Your IP address: kept only in the server's memory, for up to a minute, to stop the form being flooded (at most 5 messages a minute from one address). It is never written to our database.
• Server and network logs: our hosting provider and Cloudflare, which delivers and protects the site, see your IP address and browser details to deliver the pages and keep them secure (our legitimate interest in a working and secure site, art. 6(1)(f)). They are kept only as long as needed for that.

Optional analytics, advertising and visit recording tools stay off until you allow their configured purposes in Cookie settings. The Cookies section lists the configured tools and providers. We do not sell your data.

How long we keep it

We keep contact messages and requests and observations from quick checks for 24 months after submission; then they are deleted automatically. You can ask us to delete them sooner. Email and target addresses used for abuse limits expire from server memory within one minute.

Who processes it for us

• Hostinger hosts the site and its database.
• Cloudflare, Inc. delivers and protects the site. It may process data outside the European Economic Area; such transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. Write to info@codearc.io for a copy of these safeguards.
• Mailtrap (Railsware Products Studio LLC) sends requested website check reports and staff account emails. It processes the recipient's email address, message content, including the checked website address and report, and delivery information. Provider information: privacy policy and data processing agreement.

Your rights

You can ask us for a copy of your data, to correct or delete it, to restrict or object to its use, and to receive it in a portable form. Write to info@codearc.io; we answer within one month. If you think we handle your data unlawfully, you can complain to the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, LT-10312 Vilnius, ada@ada.lt, vdai.lrv.lt).

We make no automated decisions about you. Giving us your contact details is voluntary, but without them we cannot answer.

Cookies and similar technologies

The site remembers your privacy choice and the theme you choose. Optional tools are off by default; you can use the site without allowing them. Your browser stores:

• codearc-consent (cookie): your privacy choices, decision time and consent version, saved for 180 days on this website’s host only.
• codearc-theme (localStorage): your light or dark theme, saved only when you switch it, until you clear it.

If Cloudflare's bot protection checks a visit, it may set its own security cookie (__cf_bm, for 30 minutes). Staff who sign in to the site's administration get a cookie (payload-token) that expires two hours after they sign in and accompanies their visits to the site. Ordinary visitors are not issued this cookie.

The preference and security storage described above remembers your choices and protects the site. You can clear it in your browser's settings and change optional choices at any time in Cookie settings. Reducing a previously granted purpose reloads the page to stop loaded tools.

Last updated: 25 October 2026.