Privacy Policy

What this site collects, why, who sees it, and how to have it corrected or deleted.

Updated

In short

  • We collect what you choose to send us: a message from the contact form, a job application, an email or a call.
  • Our pages load services of three other companies: Google Analytics, which counts visits; Sentry, which tells us when a page breaks; and Cloudflare, which carries the site's traffic. The booking calendar is on Fantastical's site and opens in a new tab.
  • Our own few cookies remember your sound settings, how much 3D your device draws smoothly and your answer to the cookie note. Google's analytics cookies are on from your first page, as that note says, until you turn them off; in the EU and the UK they come only with your yes. Advertising cookies, not at all.
  • We do not sell your personal information or share it for advertising.
  • To see, correct or delete what we hold about you, write to talk@26loc.com.

Who we are

26 Lines of Code LLC ("26 Lines of Code", "we", "us") is a software development company headquartered in Miami, Florida, with teams in Estonia and Ukraine. This policy covers 26loc.com and what you send us through it. We decide how this data is used: in the terms of European law, we are its controller.

What we collect and why

When you write to us

The contact form asks for your name, email, phone number and budget, a description of your project, and whether you want to sign an NDA first. If you chose what you are building on the pricing page, your choices are filled into your message. We use all this to answer you, discuss the project and prepare an estimate or a proposal. Emails, calls and messages you send us directly are used the same way.

When you apply for a job

The application form asks for your name and email, a Telegram, WhatsApp or phone contact, where you are based, a LinkedIn or portfolio link, your CV, the pay you expect, when you can start and a message. We use them to consider you for the role and, since the form asks you to agree to it, for other roles that may suit you.

When you book a call

The booking calendar is a scheduling page of Fantastical, an app by Flexibits, and opens in a new tab. It asks for your name, email and a time, sends you the invitation and puts the call in our calendar. What you enter there is covered by Flexibits' privacy policy.

When you run diagnostics

If the site runs slowly for you, we may send you a link ending in ?diag. It opens a Diagnostics panel that records frame times, your device type, graphics card, screen size, browser version and the pages you open, and sends them to us when you press Send report, close the panel or leave the page. A report holds no name or contact details. We use reports to make the site run smoothly on devices like yours.

What any visit leaves

Like any web server, ours keeps technical logs of requests: the time, the page requested and the browser, which may include the IP address. When you send a form, we keep a note of your IP address for up to an hour to limit how many messages one address can send; it is not stored with your message. We use logs to fix errors and fend off attacks.

Visit counting and error reports

Our pages load Google Analytics, a service of Google, through its Google tag, to count visits and see where visitors come from, including from our ads. It sets its cookies and tells your visits apart from your first page, unless you turn it off: "Don't use" in the cookie note, or footer - Cookies, at any time. Turned off - and, in the EU and the UK or with a Global Privacy Control signal from your browser, until you say yes - it sets no cookies and sends Google only signals without an identifier of yours (Google's consent mode). Advertising cookies stay off.

Our pages and our server also report to Sentry, a service of Functional Software, Inc., when something breaks or runs slowly: the page, the browser and its version, what failed and the request it failed on, which includes the IP address and, for a form, what was sent in it. Sentry sets no cookies. We use these reports to fix errors.

All traffic to the site passes through Cloudflare, which delivers the pages, keeps copies of them close to visitors and shields the site from attacks.

Legal bases in the EU and the UK

Answering your message, your booking and your application are steps you ask us to take before a possible contract; answering business inquiries is also our legitimate interest. Keeping an application for other roles rests on your consent, which you can withdraw at any time. Diagnostics, logs and the limit on messages rest on our legitimate interest in a fast and secure site. Counting visits with cookies rests on your consent in the EU and the UK, and elsewhere on our legitimate interest in knowing how the site is used, which you can refuse at any time; error reports rest on our legitimate interest in a site that works.

Cookies and browser storage

Our own cookies are small. None of them identifies you or follows you to other sites:

  • volume and mute: your sound settings, kept for a year.
  • music: set only when you turn the music off, kept for a year.
  • pace: how much of the 3D picture your device draws smoothly, so your next visit starts there; kept for 60 days.
  • consent: your answer to the cookie note, kept for a year.

Unless you turn them off (in the EU and the UK: once you say yes), Google Analytics adds two cookies of its own: _ga and one named _ga_ followed by our account's code. They tell one visit of yours from the next by a random number and are kept for up to two years; "Don't use" deletes them.

A few values live in your browser's session storage and disappear when you close the tab: an estimate or the first words of a message on their way to the contact form, and whether diagnostics are on. Our staff get a sign-in cookie and a security token when they open our admin; visitors do not.

The cookie note tells you that we count visits and stays until you answer: "Fine by me" closes it, "Don't use" keeps Google's cookies off from then on and deletes those already set. In the EU and the UK (told by your device's time zone), and when your browser sends a Global Privacy Control signal, the note asks first instead: nothing is counted with cookies until you click "Fine by me". You can change your answer at any time: footer - Cookies.

Who sees your data

  • Our team: the people who answer inquiries, prepare estimates and hire. They work in the US, Estonia and Ukraine.
  • Companies that run parts of our work for us: Hetzner, which hosts our servers in Helsinki, Finland; Resend, which emails the forms' notifications to our team, and Telegram, which sends them to our team's chats (a CV goes by email only); Flexibits, whose Fantastical takes bookings; Cloudflare, which carries the site's traffic; Google, whose Analytics counts visits; Functional Software, whose Sentry receives our error reports. They handle data on our behalf.
  • Authorities, when the law requires it, and our lawyers and accountants, when needed to protect our rights.
  • A buyer or successor, if our business is merged or sold; this policy would still apply to your data.

We do not sell personal information, and we do not share it for cross-context behavioral advertising, in the meaning of California law.

Where it is stored

The site and its database run on servers in Helsinki, Finland; Cloudflare's network carries the traffic; visit counts are kept by Google and error reports by Sentry, in the US. A form's notification goes from our notification service, on the same servers in Helsinki, through Resend in the US and through Telegram to our team. Our team works from the US, Estonia and Ukraine, so the person who answers you may read your message in any of these countries. If you write to us from the EU or the UK, your data travels to the US and Ukraine because answering your request requires it.

How long we keep it

  • Messages: as long as they serve our conversation with you. If you become a client, records of our work together stay as long as the contract and tax and accounting law require.
  • Job applications: while the role is open and, if you agreed, while we may offer you another role.
  • Diagnostics reports: while they help us make the site faster.
  • Server logs: only as long as we need them to fix errors and keep the site secure.
  • Visit counts: as long as our Google Analytics account keeps them, 14 months at most.
  • Error reports: up to 90 days in Sentry.
  • The forms' notifications: up to 30 days in our notification service; the emails and messages our team received are kept like messages.
  • Cookies: for the periods listed above; you can delete them in your browser at any time.

Ask us to delete your data sooner, and we will, unless the law requires us to keep it.

Your rights

Wherever you live, you can ask us to:

  • tell you what personal data we hold about you and send you a copy;
  • correct it;
  • delete it;
  • stop contacting you;
  • withdraw a consent you gave, such as keeping your application for other roles.

Write to talk@26loc.com from the address you used with us, or tell us how we can confirm it is you. We answer within 30 days and charge nothing. Using these rights does not change how we treat you.

In the EU, the UK and countries with similar laws, you can also restrict or object to our use of your data, receive it in a portable format, and complain to your data protection authority. Residents of California and other US states with privacy laws have the rights those laws give, including to know, correct and delete, and may act through an authorized agent.

Security

Pages and forms travel over HTTPS. CVs are kept outside the folders the site serves: they have no public link and open only in our admin, which only our staff can sign in to. No way of sending or storing data is perfectly safe; if a breach affects your data, we will tell you as the law requires.

Children

The site is meant for businesses and job seekers. We do not knowingly collect personal data from anyone under 16. If a child has sent us something, write to us and we will delete it.

Other sites

Links to Clutch, Fantastical and other sites lead to services with their own privacy policies. This policy does not cover them.

Changes

When we change this policy, we update this page and its date. If a change affects data you have already given us, we will say so at the top of the page.

Contact