This is an English translation provided for convenience. The Spanish version (política de privacidad) is the legally binding one.

Data controller

Alexandru Marian Badoiu (xstdio), self-employed professional, with tax ID (NIF) [MISSING: NIF (tax ID)] and address at [MISSING: postal address]. For any question about your data: hola@xstdio.es.

What data we collect

Only the data you give us:

In the form: your name and your business's name, your website, what you need, your email or Instagram username, your timeline and an approximate budget.
If you email us or send us an Instagram direct message: whatever you tell us in the message and your contact details.

This website does not use analytics or advertising cookies. We explain this in the cookie policy.

What we use it for

To reply to you, prepare your demo and, if you're interested, your proposal. We do not make automated decisions or build profiles with your data, and we will not send you advertising.

Legal basis

Taking pre-contractual steps at your request (Article 6(1)(b) of the General Data Protection Regulation, GDPR): you ask us for information or a demo, and we need your data to provide it.

How long we keep it

For as long as we're discussing your project. If it doesn't turn into an engagement, we delete it 12 months after our last contact. If it does turn into an engagement, we keep it for as long as the law requires (for example, for invoicing).

Who we share it with

We do not pass your data on to anyone. To run the website and email, we work with these providers, who process the data on our behalf:

Netlify, Inc. (website hosting and form delivery). It is based in the United States.
Zoho Mail (the hola@xstdio.es email account).
Instagram (Meta Platforms Ireland), only if you choose to contact us by Instagram direct message.

Your rights

At any time you can ask us to access your data, correct it, erase it, restrict its use, object to its use or transfer it elsewhere. Email us at hola@xstdio.es stating which right you want to exercise.

If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD; aepd.es).

Security

The website is encrypted (HTTPS), and the form does not store your data on the website: it sends it straight to our email.

Last updated: October 8, 2026.