- Home
- Privacy policy
Privacy policy
What happens to your data when you visit wosh.productions — short, and without small print.
Google Analytics loads only after you accept it.
Analytics cookies only with consent; your choice is kept in your browser.
Files are processed in your browser, not on our server.
1. Who is responsible for your data
The controller is wosh.productions, a web, video and AI studio based in Rijeka, Croatia. For any question about this policy or your personal data, write to [email protected]. As we operate in the European Union, the General Data Protection Regulation (GDPR) applies.
2. What we collect
- Server and security logs. The site is served through Cloudflare, which records technical data such as IP address, browser details, the requested page and the time of access. This is used to deliver the site and to detect abuse and attacks.
- Cloudflare Web Analytics. Aggregate visit statistics (visits, pages, load speed) without cookies and without tracking individual visitors.
- Google Analytics 4 — only with your consent. Pages visited and their
titles, approximate traffic source, time and length of the visit, interactions with the site
(for example a click on contact or services, sending an enquiry, downloading a PDF), device
and browser type, and approximate location. Google Analytics uses a pseudonymous identifier
in the
_gacookie. For visitors in the EU, Google uses the IP address only to derive an approximate location and does not log it. We have turned off Google signals and ad personalisation. - Enquiries through the form. Your name, email address and project description entered on the Contact page. The form runs on Google Forms, so the data arrives in a Google account we manage.
- Email correspondence. If you write to us, we receive your email address, your message and any attachments.
We don't collect special categories of data and we don't build user profiles.
3. Advertising
Some pages (the working-hours and holiday tables, and the free tools) show ads through Google AdSense. On those pages Google shows its own consent dialog (Google's consent management platform, certified under the IAB TCF). Google and its partners use cookies and similar technologies for ads only as far as you choose in that dialog, and you can change your choice through the link Google shows on the page.
4. Free tools
Tools such as OCR, the PDF editor, the image converter, the QR generator, transcription and the video editor process your files in your browser — files are not sent to our server and we don't store them. To run the tools, your browser downloads code libraries and models from public content delivery networks (jsDelivr, unpkg, cdnjs and Hugging Face), which see your IP address when it does.
5. Embedded videos and fonts
Some pages embed YouTube videos. When a video loads or plays, YouTube (Google) may set cookies and receive your IP address. We serve fonts from our own domain, not from Google Fonts.
6. Why we process data, and on what legal basis
- To run and secure the site — legitimate interest (Art. 6(1)(f) GDPR).
- To measure visits with Google Analytics — your consent (Art. 6(1)(a) GDPR). You can refuse or withdraw consent at any time with the “Privacy settings” button in the bottom right corner; refusing doesn't affect your use of the site.
- To answer an enquiry and prepare a quote — steps taken at your request before entering a contract, and our legitimate interest (Art. 6(1)(b) and (f) GDPR).
- For ads — the consent you give in Google's dialog (Art. 6(1)(a) GDPR).
7. Cookies and local storage
| Name | Purpose | Duration |
|---|---|---|
wosh-analytics-consent | Remembers your analytics choice (browser local storage, never sent anywhere) | Until you clear it |
_ga, _ga_* | Google Analytics — only with consent | Up to 2 years |
| Google advertising cookies | Ads and ad measurement — as chosen in Google's dialog | Per Google's policies |
| YouTube cookies | Playing embedded videos | Per Google's policies |
8. Third parties that process data for us
- Cloudflare — hosting, CDN, security and Web Analytics.
- Google — Google Analytics 4 (only with consent), Google Forms for enquiries, Google AdSense for ads and YouTube for embedded videos.
- jsDelivr, unpkg, cdnjs and Hugging Face — delivery of code libraries and models for the free tools.
Some of these providers are located outside the European Economic Area, mainly in the United States. Such transfers rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.
9. How long we keep data
We keep Google Analytics data for at most 14 months. We keep enquiries and correspondence for as long as the conversation or collaboration lasts, and as long as regulations require, for example for accounting records. After that we delete them.
10. Your rights
You have the right to access your data, to rectification, erasure, restriction of processing, to object to processing and to data portability, and the right to withdraw consent at any time without affecting the lawfulness of processing before the withdrawal. Send requests to [email protected]. If you believe your data is processed unlawfully, you can lodge a complaint with the Croatian Personal Data Protection Agency (azop.hr) or the supervisory authority in your country.
11. Changes to this policy
We will update this policy when we change how we process data. The date of the last change is shown at the top of the page.