Privacy Policy

Effective from: 2026-05-18. Last updated: 2026-05-18.

This privacy policy explains what personal data we collect when you visit the website liubertaite.com (hereinafter referred to as the “website”), why we collect it, how long we store it, and what your rights are under the General Data Protection Regulation (GDPR).

1. Who is the data controller

Agnė Liubertaitė (website author)
Email: [email protected]

Technical maintenance: Coservices OÜ (Estonia, EE VAT EE102227804), [email protected]. Coservices acts as a data processor according to the instructions of the data controller.

2. What data we collect

2.1. Necessary data (collected always, without consent)

• Language selection — cookie pll_language (Polylang), valid for 1 year, remembers the selected website language
• Session cookies — temporary, used only in the contact form or when logging into WordPress
• Server logs — your IP address, browser type, referring URL, pages visited. Stored for up to 7 days, used only for security (DDoS protection, intrusion detection) and technical debugging
• Cloudflare security cookies — bot separation (__cf_bm, cf_clearance), valid for up to 30 min

These cookies cannot be refused — the website does not function without them.

2.2. Statistics data (ONLY with your consent)

If you selected “Accept” in the consent banner, we use:

• Google Analytics 4 (ID: G-SDEZJ63RQF) — anonymized statistics about:
  • Pages visited and their reading duration
  • Where you come from (search engines, social networks)
  • Device type (mobile/computer) and general location (country)
  • Browser language
• Cookies: _ga, _ga_SDEZJ63RQF — valid for up to 2 years
• IP address is anonymized (the last octet is replaced with zeros) — Google does not receive it in full form
• Google Consent Mode v2 is used — even if you consent, data for advertising (ad_storage, ad_personalization) remains blocked

If you selected “Reject” in the consent banner — Google Analytics does NOT run, cookies are NOT set.

2.3. Contact form

If you fill out the contact form, we collect your name, email address, and the content of your message. This data is used solely to respond to your inquiry. It is stored in the server’s email inbox for up to 12 months (after which it is automatically deleted).

3. What is the legal basis for data collection

• Necessary cookies — GDPR Article 6(1)(f): legitimate interest of the controller (website operation, security)
• Statistics cookies — GDPR Article 6(1)(a): your consent
• Contact form — GDPR Article 6(1)(b): performance of a contract (responding to an inquiry)

4. With whom we share data

• Google LLC (USA) — Google Analytics 4 data is transferred to Google servers. Google is a participant in the EU-US Data Privacy Framework (a valid transfer basis under GDPR).
• Cloudflare, Inc. (USA/EU) — DDoS protection and caching. Cloudflare is a party to the GDPR DPA agreement.
• Hetzner Online GmbH (Germany) — server hosting. Data remains within the EU.
• Data is NOT sold or shared with third parties for advertising.

5. How long we store data

• Server logs (IP addresses): 7 days
• Google Analytics (anonymized) data: 14 months (as set in GA4 settings)
• Contact form messages: up to 12 months
• Backups (which may contain this data): up to 12 months, encrypted in Cloudflare R2 storage

6. Your rights (GDPR)

Under GDPR, you have the following rights:

• Right of access — to obtain a copy of the data we hold about you
• Right to rectification — if the data is incorrect
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to withdraw consent at any time (click the cookie banner again or clear your browser’s localStorage)
• Right to lodge a complaint with the State Data Protection Inspectorate (vdai.lrv.lt)

To submit requests, please contact [email protected]. We will respond within 30 days (the timeframe set by GDPR).

7. How to withdraw consent

• Open your browser’s developer tools (F12) → Application/Storage → Local Storage → liubertaite.com
• Delete the keys lb_consent and lb_consent_date
• Refresh the page — the cookie banner will reappear
• Alternatively, change your browser settings: block third-party cookies

8. Security

• All data is transmitted via an encrypted HTTPS channel (TLS 1.2+, HSTS)
• The server is protected by a firewall (UFW), fail2ban, and automatic security updates
• WordPress administrative access is restricted to trusted IP addresses only
• Backups are encrypted and stored in Cloudflare R2 (EU region)

9. Cookie list (cookie table)

Cookie	Purpose	Validity	Type
pll_language	Language selection	1 year	Necessary
__cf_bm	Cloudflare bot protection	30 min	Necessary
cf_clearance	Cloudflare DDoS protection	1 hour	Necessary
wordpress_logged_in_*	WP login (admins only)	Session	Necessary
_ga	Google Analytics — visitor separation	2 years	Consent
_ga_SDEZJ63RQF	Google Analytics — session state	2 years	Consent
localStorage: lb_consent	Your consent status	Until deleted	Necessary

10. Changes

The privacy policy may be updated. Significant changes will be posted on the website and indicated by the date at the top. We encourage you to visit this page periodically.

Questions about your data? [email protected]