Last updated: 20 Oct 2026
Who controls your data
Elegant Matter is operated by Piotr Stankiewicz, who is the controller of the personal data described in this policy.
You can contact the controller through the Contact page at https://elegantmatter.com/contact/.
Information we process
When you use the Contact form, we receive the name, email address and message you choose to submit.
Our hosting and security infrastructure may also process limited technical information needed to operate and protect the site, such as IP addresses, browser or user-agent information, requested URLs, referrers, timestamps, and error or security logs. We use Wordfence Security to detect and block malicious requests, protect sign-ins, and scan site files for malware and known vulnerabilities. Wordfence may record security-related events, including login attempts and firewall activity, using this technical information. This security processing is based on our legitimate interests in preventing abuse and protecting the site; it operates independently of optional analytics consent.
The Contact form also records basic form-view statistics locally on the site. These statistics are used only to understand basic form performance, are configured without cookies or third-party analytics, and are not used to identify visitors.
How and why we use information
We use personal data to:
- respond to messages and manage related correspondence;
- handle corrections, privacy requests and other requests sent through the Contact form;
- operate, secure and troubleshoot the website; and
- comply with legal obligations and protect the site and its users from abuse.
For ordinary Contact-form correspondence, our legal basis is our legitimate interest in receiving and responding to inquiries and managing related correspondence. Where processing is necessary to handle a data-protection rights request or comply with another legal obligation, the legal basis is compliance with that obligation. We also rely on legitimate interests for proportionate website security, troubleshooting and basic local form-performance measurement.
We do not use information submitted through the Contact form for advertising, profiling or automated decision-making.
Contact form
The Contact form asks for a name, email address and message. These fields are required to use the form. Providing them is not a legal requirement, but without the requested information we may be unable to process or respond to your message.
The form does not keep a separate database copy of submitted messages. Submissions are delivered by email.
First-party tools
Elegant Matter may provide first-party browser-based tools and diagnostics. Where practical, these tools are designed so their core processing happens locally in your browser rather than sending the information you enter or generate to a remote service.
Some tools may use browser or device capabilities needed for their function, such as access to connected hardware information exposed by the browser, vibration or haptic controls, or writing a result to your clipboard after you choose a copy action. Unless a tool states otherwise, these interactions are used only to provide the requested function and are not used to build a profile of you.
URL Cleaner may use localStorage to save user-selected cleaning preferences and custom parameter rules on that device and browser. Saved preferences do not contain the original or cleaned URLs, and URL Cleaner does not keep a persistent history of cleaned URLs by default. Preferences remain locally in that browser until you reset them, clear site data or the browser removes them. Ordinary page requests may still generate the hosting and security logs described above.
If a future tool requires remote processing, analytics, an account, persistent storage of tool inputs or results, or another form of data handling not covered here, we will describe that behavior where appropriate and update this policy when necessary.
Cookies, browser storage and analytics
We use essential cookies and browser storage for technical functions and to remember your privacy choices. Details are in our Cookie Policy. Wordfence may set strictly necessary cookies for authentication, login security and firewall functions, primarily for signed-in users. URL Cleaner preferences and basic local Contact-form statistics are described above.
With your consent, we use Google Analytics 4 to understand site traffic and interactions, including page visits, scrolling, file downloads, successful use of supported tools, clicks on research evidence downloads and successful Contact-form submissions. These custom events record fixed action and feature identifiers, not the contents of tool inputs, results or messages. Analytics can process cookie identifiers, page URLs and titles, referring pages, timestamps, browser and device information, approximate location and interaction events. Google receives your IP address to handle the request; Google states that GA4 does not log or store individual IP addresses.
Our legal basis for optional analytics is your consent under Article 6(1)(a) GDPR. Analytics loads only after you allow Statistics. You can reject it without losing access to articles or tools, and change or withdraw consent through Cookie settings. Withdrawal stops future collection and does not affect the lawfulness of processing before withdrawal.
We do not use Google Signals, advertising personalization or Google Ads links. Automatic site-search, form-interaction and outbound-click tracking are disabled. We do not deliberately send tool inputs, uploaded file contents, pasted text, URLs submitted to URL Cleaner, clipboard contents or contact messages to Analytics.
Google Analytics is provided by Google Ireland Limited for our EEA account. Google and its subprocessors may process analytics data outside the EEA, including in the United States. Google describes its transfer safeguards, including applicable adequacy mechanisms and Standard Contractual Clauses, in its international-transfer information. See also Google’s Privacy Policy.
Our Analytics configuration uses two-month user-level and event-level retention, without resetting user-data retention on new activity. Standard aggregated reports may remain available longer. Analytics cookies have a separate lifetime, described in our Cookie Policy. Withdrawing consent does not by itself delete earlier data; you can contact us about deletion and other applicable rights.
Service providers and international transfers
We use service providers where necessary to operate the site, including Porkbun for domain and hosting infrastructure, Resend for transactional email delivery, Wordfence Security (Defiant, Inc.) for website security, and Google Drive for restricted-access recovery backups of WordPress files and the database. Wordfence may process technical and security-event information as part of its protection services, and relevant information may be transmitted to its infrastructure outside the EEA, including in the United States. Defiant provides applicable transfer safeguards, including Standard Contractual Clauses; see its Data Processing Addendum and Privacy Policy.
Some service providers process data in the United States. Resend states that transfers from the EEA are covered by the European Commission's Standard Contractual Clauses and its participation in the EU-U.S. Data Privacy Framework. Porkbun states that it uses appropriate safeguards for international transfers where required, including Standard Contractual Clauses or applicable adequacy decisions.
Providers may use their own subprocessors where necessary to deliver their services, subject to their contractual and legal obligations.
Retention
We keep Contact correspondence only for as long as reasonably necessary to respond, manage follow-up, protect the site or establish, exercise or defend legal claims, and for any additional period required by law.
Resend states that email and log data is retained for 30 days while the account is active, backups persist for 7 days, and remaining customer data is deleted within 90 days after account termination.
Hosting and security logs may be retained by the hosting provider for operational, security, legal or business purposes under its applicable retention practices. Wordfence Live Traffic security records are subject to configured age and row-count limits; other security records may be kept as necessary to investigate abuse, maintain site security or meet legal obligations. Recovery backups are kept on a rotating schedule in restricted-access Google Drive storage and may include personal information held in the site database. Older scheduled backups are removed under the configured retention policy; separately protected recovery copies may be kept longer where necessary.
Your rights
Where applicable, you may have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability, or to object to certain processing, including processing based on legitimate interests.
You can exercise your data-protection rights through the Contact page at https://elegantmatter.com/contact/.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at https://www.aepd.es/ or another competent supervisory authority.
Changes to this policy
We may update this Privacy Policy when our tools, providers or data practices change. The date at the top of this page shows when the policy was last updated.