1. Who we are
This website is operated by Moongie, a cold email infrastructure and outbound marketing studio. We are the data controller for personal data collected through this website.
Contact: io@moongie.com
2. What personal data we collect
We collect personal data in three ways:
a) Data you provide directly
- Contact form — your name (optional), email address, company name, and the message you send us.
- Newsletter sign-up — your email address.
b) Data collected automatically when you visit
- Page views and session data — collected by Plausible Analytics and Vercel Insights to help us understand how visitors use the site. Plausible is cookieless and does not store any personal identifiers — only aggregated statistics.
- IP address and browser information — your IP address, browser type, and operating system are logged by our hosting provider (Vercel) as part of standard web server operation. These logs are retained for a short period for security and diagnostics.
c) Data transmitted to third parties as part of loading the page
When your browser loads our pages, certain requests are automatically made to third-party servers. We do not receive or store the data from these requests, but the third parties do:
- Our pages load fonts (Space Grotesk, Inter) from Google Fonts (fonts.googleapis.com, fonts.gstatic.com). Your browser sends your IP address and browser headers directly to Google's servers as part of this HTTP request.
- Our pages load animation libraries from jsDelivr CDN (cdn.jsdelivr.net). Your IP and browser headers are similarly transmitted.
3. Categories of personal data obtained indirectly
We do not purchase, rent, or receive personal data about you from other organisations such as Facebook, Google, or data brokers.
However, as described in section 2(c) above, certain third parties receive your personal data automatically when your browser makes requests to their servers while loading this website. The categories of personal data involved are:
| Third party | Categories of data they receive | How it occurs |
|---|---|---|
| Google LLC (Google Fonts) | Network identifier (IP address), browser type and version, referring URL, timestamp | Your browser requests font files from Google's servers when loading any page on this site |
| jsDelivr / Cloudflare | Network identifier (IP address), browser type, referring URL | Your browser loads JavaScript animation libraries from jsDelivr CDN |
4. Why we collect your data (and our legal basis)
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Responding to your contact form enquiry | Name, email, message | Pre-contractual steps / legitimate interest (Art. 6(1)(b) & (f)) |
| Sending our monthly newsletter | Email address | Your consent (Art. 6(1)(a)) |
| Understanding how visitors use the site and improving it | Page views, device type (via Plausible & Vercel — no personal identifiers) | Legitimate interest (Art. 6(1)(f)) |
| Loading website fonts and libraries | IP address, browser info (transmitted to Google & jsDelivr) | Legitimate interest in delivering a functional, well-designed website (Art. 6(1)(f)) |
| Website security and diagnostics | IP address, server logs | Legitimate interest (Art. 6(1)(f)) |
| Managing cookie consent | Your consent preference (stored in your browser) | Legal obligation / legitimate interest (Art. 6(1)(c) & (f)) |
5. Who we share your data with
We use the following third-party service providers (data processors) who may process personal data on our behalf or receive it as a result of your visit:
| Processor | Purpose | Data shared | Location |
|---|---|---|---|
| Google LLC | Font delivery (Google Fonts) | IP address, browser headers | USA |
| Plausible Analytics OU | Privacy-friendly website analytics (no cookies, no personal data stored) | Anonymised aggregate statistics only | EU (Estonia) |
| Vercel Inc. | Website hosting and performance insights | IP address, page requests, performance metrics | USA |
| FormSubmit.co | Processing and forwarding contact & newsletter form submissions | Form contents (name, email, message) | USA |
| jsDelivr / Cloudflare | Delivery of JavaScript animation libraries | IP address, browser headers | Global CDN |
| SecurePrivacy | Cookie consent management platform | Consent preferences | USA / EU |
We do not sell your personal data to any third party. We do not share your data with advertising networks or use it for behavioural advertising.
6. International transfers
Some of our processors are based in the United States. Where personal data is transferred outside the European Economic Area (EEA), we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission, and/or
- The EU-US Data Privacy Framework where the processor is certified.
Google LLC and Vercel Inc. participate in the EU-US Data Privacy Framework. You can verify their certifications at dataprivacyframework.gov.
7. How long we keep your data
- Contact form enquiries — email correspondence is retained for up to 2 years after the last communication, then deleted.
- Newsletter subscriptions — your email address is kept until you unsubscribe. You can unsubscribe at any time via the link in any newsletter email.
- Server logs — retained by Vercel for up to 30 days for security and diagnostic purposes.
- Analytics data — Plausible retains aggregated (non-personal) statistics indefinitely. Vercel retains performance data per its own retention policy.
- Consent preferences — your cookie consent choice is stored in your browser's local storage until you clear it.
8. Cookies
We aim to keep cookie use to a minimum:
- No tracking cookies — Plausible Analytics is cookieless and does not set any cookies on your device.
- Consent cookie — SecurePrivacy may set a small cookie or use local storage to remember your consent preferences.
- No advertising cookies — we do not use Facebook Pixel, Google Ads, or any retargeting/advertising cookies.
9. Your rights under GDPR
If you are located in the European Economic Area (EEA) or the UK, you have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — ask us to correct inaccurate or incomplete data.
- Right to erasure — ask us to delete your personal data ("right to be forgotten").
- Right to restriction — ask us to limit how we use your data.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent — where processing is based on your consent (e.g. newsletter), you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, email us at io@moongie.com. We will respond within 30 days. We may ask you to verify your identity before fulfilling the request.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with your local data protection authority. In Poland, this is the Urząd Ochrony Danych Osobowych (UODO) — uodo.gov.pl.
10. Children's privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date below. For significant changes, we will add a notice to the website. We encourage you to review this page periodically.
12. Contact
For any questions about this Privacy Policy or to exercise your rights, contact us at:
Moongie
Email: io@moongie.com
Last updated: 19 June 2026