{"id":1764,"date":"2026-09-06T12:11:09","date_gmt":"2026-09-06T09:11:09","guid":{"rendered":"https:\/\/massruum.ee\/privacy\/"},"modified":"2026-09-06T12:11:09","modified_gmt":"2026-09-06T09:11:09","slug":"privacy","status":"publish","type":"page","link":"https:\/\/massruum.ee\/en\/privacy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"\n
\n\t\n\t

Home<\/b><\/a> \u00b7 Privacy policy<\/p>\n\t\n\t\n\t

Privacy policy.<\/h1>\n\t\n\t\n\t

What this site learns about you, why, and how long it keeps it. The short version: analytics stays off until you allow it, and the only thing we genuinely receive is whatever you type into the contact form.<\/p>\n\t\n\t\n\t

Last updated 6 September 2026<\/p>\n\t\n<\/div>\n\n\n\n

\n\t\n\t

Controller<\/p>\n\t\n\t\n\t

Who processes the data.<\/h2>\n\t\n\t\n\t

Massruum O\u00dc<\/strong>, registry code 12329892, Tallinn, Estonia. Write to hello@massruum.ee<\/a> – the same address answers if you want to see or delete what we hold.<\/p>\n\t\n<\/div>\n\n\n\n

\n\t\n\t

Data<\/p>\n\t\n\t\n\t

What is collected, and what happens to it.<\/h2>\n\t\n\n\t\n\t
\n\t\t\n\t\t
\n\t\t\t\n\t\t\t

01<\/p>\n\t\t\t\n\t\t\t\n\t\t\t

The contact form<\/h2>\n\t\t\t\n\t\t<\/div>\n\t\t\n\t\t\n\t\t
\n\t\t\t\n\t\t\t

The form asks for your name, email address, company, project type and your message. When a submission goes through, it is emailed to hello@massruum.ee<\/a> and no copy is written to the site’s database<\/strong>. From there your enquiry lives in our mailbox like any other email.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t

Basis:<\/strong> legitimate interest in replying to someone who contacted us, and taking steps towards a contract if the enquiry becomes work.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t

How long:<\/strong> enquiries that do not turn into work are deleted from the mailbox within a year. Client correspondence is kept for as long as the engagement lasts, and invoices for seven years, which is what Estonian accounting law requires.<\/p>\n\t\t\t\n\t\t<\/div>\n\t\t\n\t<\/div>\n\t\n\n\t\n\t

\n\t\t\n\t\t
\n\t\t\t\n\t\t\t

02<\/p>\n\t\t\t\n\t\t\t\n\t\t\t

Spam defence<\/h2>\n\t\t\t\n\t\t<\/div>\n\t\t\n\t\t\n\t\t
\n\t\t\t\n\t\t\t

This form receives roughly ten automated submissions a day. To tell them apart from people, the site does two things. It counts submissions from one IP address within an hour, keeping only a hash of that address, which expires after the hour. And it keeps the last 40 rejected or suspicious submissions<\/strong> – with the IP address, name, email and the beginning of the message – so the heuristics can be corrected when a real person is caught by mistake.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t

That list is 40 entries long and every new submission pushes the oldest out, so entries delete themselves. It also catches an enquiry that passed every check but failed to send, because otherwise that enquiry would simply be lost.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t

Basis:<\/strong> legitimate interest in keeping our own mailbox usable.<\/p>\n\t\t\t\n\t\t<\/div>\n\t\t\n\t<\/div>\n\t\n\n\t\n\t

\n\t\t\n\t\t
\n\t\t\t\n\t\t\t

03<\/p>\n\t\t\t\n\t\t\t\n\t\t\t

Analytics<\/h2>\n\t\t\t\n\t\t<\/div>\n\t\t\n\t\t\n\t\t
\n\t\t\t\n\t\t\t

The site uses Google Analytics (GA4) to see which pages people care about and where they arrive from. Until you allow analytics in the cookie notice, it is off<\/strong>: Google Consent Mode tells Analytics up front that nothing is permitted, and nothing is written to your device. Once you allow it, the cookies _ga<\/code> and _ga_*<\/code> appear.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t

We do not export these statistics anywhere, and we do not join them to any name, email address or enquiry. A number stays a number to us. The data itself is held in Google Analytics under Google’s retention settings, and only we log in to it.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t

We also read Google Search Console, which shows which searches surface the site in Google. Those figures are aggregates and no individual can be identified from them.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t

Basis:<\/strong> your consent. You can withdraw it at any time – open cookie settings<\/a>.<\/p>\n\t\t\t\n\t\t<\/div>\n\t\t\n\t<\/div>\n\t\n\n\t\n\t

\n\t\t\n\t\t
\n\t\t\t\n\t\t\t

04<\/p>\n\t\t\t\n\t\t\t\n\t\t\t

Server logs<\/h2>\n\t\t\t\n\t\t<\/div>\n\t\t\n\t\t\n\t\t
\n\t\t\t\n\t\t\t

The site runs on Zone Media O\u00dc servers in Estonia. Like any web server, it writes every request to a log: IP address, timestamp, the address requested and the browser identifier. Those logs are used to investigate faults and attacks, not for marketing, and the hosting provider sets how long they are held.<\/p>\n\t\t\t\n\t\t\t\n\t\t\t

Basis:<\/strong> legitimate interest in keeping the site running and secure.<\/p>\n\t\t\t\n\t\t<\/div>\n\t\t\n\t<\/div>\n\t\n<\/div>\n\n\n\n

\n\t\n\t

Cookies<\/p>\n\t\n\t\n\t

What reaches your browser.<\/h2>\n\t\n\t\n\t

Everything below is a first-party cookie set by massruum.ee itself. There are no third-party tracking pixels here: no Facebook, no LinkedIn, no ad networks.<\/p>\n\t\n\t\n\t

Cookie<\/th>What for<\/th>How long<\/th><\/tr><\/thead>
massruum_consent<\/code><\/td>Remembers whether you allowed analytics. Without it the site would ask again on every visit<\/td>1 year<\/td><\/tr>
massruum_lead<\/code><\/td>Tells analytics that an enquiry was genuine rather than a bot. Deleted immediately after it is read<\/td>5 minutes<\/td><\/tr>
_ga<\/code>, _ga_*<\/code><\/td>Google Analytics. Only appear if you allow analytics<\/td>Set by Google<\/td><\/tr>
wp-wpml_current_language<\/code><\/td>Remembers whether you are reading the Estonian or the English site<\/td>1 day<\/td><\/tr>
wordpress_*<\/code>, wp-settings-*<\/code><\/td>Only for a logged-in editor. An ordinary visitor never receives these<\/td>Session to 1 year<\/td><\/tr><\/tbody><\/table><\/figure>\n\t\n\t\n\t

You can change your mind at any time: open cookie settings<\/a>. You can also delete cookies in your browser settings, and the site will ask again next time.<\/p>\n\t\n<\/div>\n\n\n\n

\n\t\n\t

Third parties<\/p>\n\t\n\t\n\t

Where the data goes.<\/h2>\n\t\n\t\n\t

We do not sell or trade data. It is seen only by the providers whose services the site uses:<\/p>\n\t\n\t\n\t