Privacy and cookies

Updated: 15 October 2026.

Controller and contact

The data controller is Grzegorz Klukowski, working under the Crumb Works brand, ul. Trylogii 22, Warsaw, Poland. Contact: greg@crumbworks.pl. Crumb Works is a brand name.

Enquiries

When you email us, we process your contact details and message to reply and discuss your project. The basis is steps taken at your request before entering into a contract (GDPR Article 6(1)(b)), or our legitimate interest in handling correspondence and protecting legal claims (Article 6(1)(f)). Providing data is voluntary; without contact details we may be unable to reply. Correspondence is retained as needed to handle the matter and subsequently as required for legal obligations or claims within the applicable statutory periods.

Website operation

Hosting and security providers process technical information such as IP address, request time and browser details to serve and protect the website. Our legitimate interest is keeping the service operational and secure. The website uses OpenAI Sites hosting and Cloudflare infrastructure. We also use email service providers.

Optional analytics

Google Analytics 4 (Google Ireland Limited) loads only after you consent. We measure visits and contact clicks to understand website use, based on consent (GDPR Article 6(1)(a)). Analytics events do not include enquiry text or information entered in a brief. An email click does not confirm a sent enquiry. Remarketing and ad personalization are not enabled on this website.

GA4 user and event data retention is set to 2 months, without resetting it on new activity. Aggregated reports may remain available longer.

Browser storage and choices

Your choice is saved in localStorage as crumb-consent-v1 for up to 180 days to respect your preference. After consent, Analytics may set _ga and _ga_* cookies configured to last up to 180 days, renewed on website use. The sessionStorage entry crumb-entered remembers completion of the opening animation for the current session. Hosting security cookies protect against automated abuse. Analytics consent is not required to use the website.

Withdraw consent using “Privacy settings” in the footer. This stops measurement and removes accessible GA cookies without affecting earlier lawful processing. You can also remove website data in your browser.

Recipients and international transfers

Recipients may include hosting, security and email providers, and Google Analytics after consent. Providers may process data outside the EEA, including the United States, under applicable safeguards such as adequacy decisions for eligible recipients or standard contractual clauses. Contact the controller for safeguard information. See the Google, OpenAI and Cloudflare privacy policies.

Your rights

Depending on the legal basis and circumstances, you may request access, correction, erasure, restriction or portability, object to processing based on legitimate interests and withdraw consent. You can complain to Poland’s supervisory authority, the President of the Personal Data Protection Office (uodo.gov.pl). We do not make solely automated decisions producing legal or similarly significant effects based on these data.