--- title: "Privacy Policy" description: "How Godberry Studios handles your data, including GDPR rights for EU visitors." date: 0001-01-01 url: https://godberrystudios.com/privacy/ author: Tomas Lebedinskas --- **Effective date:** April 14, 2026 ## 1. Data Controller Godberry Studios is a sole proprietorship operated from the Republic of Lithuania and is the data controller for personal data processed via [godberrystudios.com](https://godberrystudios.com). **Contact for privacy matters:** hello@godberrystudios.com ## 2. What We Collect and Why We deliberately collect as little personal data as possible. **a) Cloudflare Web Analytics (aggregate statistics).** We use Cloudflare's privacy-first analytics to understand which articles are read and how visitors reach the site. Cloudflare Web Analytics does **not** use cookies, does **not** assign persistent identifiers, and does **not** build individual visitor profiles. We receive only aggregate, non-identifying statistics (e.g. total page views per article, referring domains, country-level geography). - **Legal basis:** Legitimate interests (Art. 6(1)(f) GDPR) — measuring traffic to improve the site. We have assessed that this processing has minimal privacy impact because no cookies or persistent identifiers are involved. **b) Newsletter subscription (if you opt in).** If you voluntarily provide your email address to subscribe to our newsletter, we store that email address and send you periodic updates about new articles and tools. - **Legal basis:** Consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time by clicking the unsubscribe link in any email or by contacting us. We do **not** collect names, phone numbers, payment information, precise location data, device fingerprints, or behavioural profiles on this website. ## 3. Cookies This website does **not** set any cookies. No consent banner is shown because none is required under the ePrivacy Directive for a cookieless site. ## 4. Third Parties | Service | Role | Personal data involved | Transfer | |---|---|---|---| | Cloudflare, Inc. | Hosting (Cloudflare Pages) and cookieless analytics | IP addresses are briefly processed in transit for routing and DDoS protection; not stored by us | US — covered by Cloudflare's Data Processing Addendum and EU Standard Contractual Clauses | | Apify Technologies s.r.o. | Platform hosting our paid tools (Content to Social MCP, Google Reviews Scraper) | When you choose to use one of our tools, your interaction happens on Apify's platform under Apify's own privacy policy | EU (Czech Republic) | When you use our tools on Apify, Apify is the data controller for that interaction. Their privacy policy: . ## 5. How Long We Keep Your Data - **Analytics data:** Cloudflare Web Analytics retains aggregate data for up to 6 months; we ourselves do not store any analytics data beyond what is visible in the Cloudflare dashboard. - **Newsletter email:** We keep your email until you unsubscribe or ask us to delete it. On unsubscribe, your email is removed within 30 days. ## 6. Your Rights Under GDPR If you are in the European Economic Area, the UK, or Switzerland, you have the right to: - **Access** the personal data we hold about you - **Rectify** inaccurate data - **Erase** your data ("right to be forgotten") - **Restrict** or **object to** processing - **Data portability** — receive your data in a machine-readable format - **Withdraw consent** at any time (for newsletter subscriptions) - **Lodge a complaint** with your national data protection authority. In Lithuania this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija — VDAI): . To exercise any of these rights, email **hello@godberrystudios.com**. We will respond within 30 days as required by Art. 12(3) GDPR. ## 7. Security We rely on Cloudflare's infrastructure security (TLS encryption in transit, DDoS protection, WAF). Our newsletter list (if any) is stored with industry-standard access controls. We will notify affected individuals and the supervisory authority within 72 hours if a personal data breach likely results in a risk to your rights (Art. 33–34 GDPR). ## 8. Children This website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it. ## 9. International Data Transfers Some of our service providers (notably Cloudflare) are based in the United States. Where data is transferred outside the EEA, we rely on the Standard Contractual Clauses approved by the European Commission and, where applicable, the EU–US Data Privacy Framework. ## 10. Changes to This Policy We will update this policy if our practices change. Material changes will be announced on this page with a new effective date. Continued use of the website after a change means you accept the updated policy. ## 11. Contact **Email:** hello@godberrystudios.com **Website:** --- *This policy is provided in good faith and is intended to be accurate and GDPR-compliant, but it is not legal advice. For high-stakes matters, consult a qualified data protection lawyer.*