Privacy.
One inbox, no tracking pixels in the form, no audience syncs. Receipts below.
Operator
Who's behind this site
Front Tribe is a JavaScript engineering studio in Osijek, Croatia. The data controller for fronttribe.com is Front Tribe — write to kresimir.galic@fronttribe.com for anything privacy-related.
Form data
What the contact form collects
Three fields: name, email, and your message. No tracking pixels, no hidden inputs, no third-party iframes. Submissions land in our inbox via Resend and are mirrored to a private internal note so we don't lose context.
- Name — to address the reply
- Email — to send the reply
- Message — to understand the brief
Analytics
What Google Analytics sees
We use Google Analytics 4 to count visits and see which pages get read. IP addresses are anonymised before storage. We do not run ads, retargeting, or audience syncs. Until you accept the cookie banner, GA fires only cookieless pings — no identifier, no profile.
Retention
How long we keep your details
Inactive enquiries are deleted after 18 months. Active project conversations stay until the project closes, plus the seven years required by Croatian tax law for invoicing records. You can ask for earlier deletion — see Section 06.
Data location
Where your data lives
Everything sits inside the EU. We don't transfer personal data outside the EEA, except where Google Analytics processes anonymised pings under standard contractual clauses.
- Form submissions — Resend (EU region)
- Site database — Supabase Postgres, EU Central (Frankfurt)
- Hosting — Vercel (EU edge)
- Analytics — Google EEA region, anonymised IP
Your rights
What you can ask for under GDPR
You can request a copy of what we hold, fix it, delete it, withdraw consent, or object to processing. You can also lodge a complaint with the Croatian data protection authority (AZOP). Email kresimir.galic@fronttribe.com — we reply within 30 days.
Updates
Changes to this note
When the substance of this note changes, we bump the date at the top and clear stored consent so you re-confirm in the banner. Cosmetic edits don't reset consent.
What's set on your device
| Name | Duration | Purpose |
|---|---|---|
| ft.consent.v1 | 1 year | Stores your banner choice. First-party, our domain only. Strictly necessary. |
| _ga | 24 months | Google Analytics — visitor identifier. Only set if you accepted analytics. |
| _ga_<id> | 24 months | Google Analytics — session state. Only set if you accepted analytics. |
Data requests
One inbox, one human, 30 days.
For access, correction, deletion, or any other GDPR request, write directly. No ticket form, no portal — just an email you'll get an answer to.