Privacy policy

Who we are

True Craft Lab is the trading name of Pablo Mandado, a small independent web studio (“we”, “us”). We design and build websites and the web apps behind them. Pablo Mandado is the data controller for the personal data described here. For anything about your data, email hello@truecraftlab.com— you’ll reach the person responsible, not a desk.

The short version

We only collect data you choose to give us — when you send an enquiry, run one of our free tools, or download a resource — plus privacy-friendly, cookieless analytics. We don’t use tracking cookies, we don’t run ad pixels, and we never sell your data.

What we collect, and why

When you contact us

If you use our contact form or email us, we collect your name, email address, and whatever you choose to tell us about your project (which may include your company and budget). We use it only to reply and discuss working together. Legal basis: our legitimate interest in responding to you, and taking steps at your request before a possible contract.

When you use a free tool

Our free tools — the site check-up, the SEO check-up, and downloadable resources like the fast-website checklist — ask for your email address so we can send your result or the download, and they store the answers and score you generate. Legal basis: your consent, given when you submit the form. You can withdraw it any time by asking us to delete the record.

Analytics

We use cookielessanalytics (Vercel Analytics and Speed Insights) to see which pages are useful and how fast the site runs. They set no cookies, store no identifier on your device, and don’t track you across other sites — they process aggregated, non-identifying data such as page views, approximate region and device type. Legal basis: our legitimate interest in measuring and improving the site.

Cookies

We don’t use cookies for tracking or advertising — which is why you’ll never see a cookie banner here. Our fonts are served from our own domain (no calls to third-party font services), and our analytics are cookieless. Any storage we use is strictly technical and limited to our own admin tools, not visitors.

Who we share it with

We don’t sell or rent your data. We share it only with the service providers (processors) that help us run the site, under contract and only as needed:

• Vercel — hosting, plus the cookieless analytics above.
• Neon — the database where enquiries and tool submissions are stored.
• Resend — delivers the emails (your enquiry to us, your tool result to you).

Some of these providers are based in, or process data in, the United States. Where data leaves the European Economic Area, it’s covered by appropriate safeguards such as the EU Standard Contractual Clauses.

How long we keep it

We keep enquiry and tool-submission data for up to 24 monthsafter your last contact with us, then delete it — unless we end up working together, in which case we keep what the project and our legal records require. You can ask us to delete your data sooner at any time and we will, unless we’re legally required to keep it.

Your rights

Under the GDPR you can ask us to: access a copy of your data; correct it; delete it; restrict or object to how we use it; or receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To exercise any of these, email hello@truecraftlab.com— there’s no charge and we’ll respond promptly.

If you believe we’ve mishandled your data, you can complain to your local data protection authority. In Spain that’s the Agencia Española de Protección de Datos (AEPD), aepd.es.

Changes

If we change this policy we’ll update the date above, and note anything material.

Contact

Questions about your privacy? Email hello@truecraftlab.com.