One inbox, no tracking pixels in the form, no audience syncs. Receipts below.
Operator
Front Tribe is a JavaScript engineering studio in Osijek, Croatia. The data controller for fronttribe.com is Front Tribe — write to kresimir.galic@fronttribe.com for anything privacy-related.
Form data
Three fields: name, email, and your message. No tracking pixels, no hidden inputs, no third-party iframes. Submissions land in our inbox via Resend and are mirrored to a private internal note so we don't lose context.
Analytics
We use Google Analytics 4 to count visits and see which pages get read. IP addresses are anonymised before storage. We do not run ads, retargeting, or audience syncs. Until you accept the cookie banner, GA fires only cookieless pings — no identifier, no profile.
Retention
Inactive enquiries are deleted after 18 months. Active project conversations stay until the project closes, plus the seven years required by Croatian tax law for invoicing records. You can ask for earlier deletion — see Section 06.
Data location
Everything sits inside the EU. We don't transfer personal data outside the EEA, except where Google Analytics processes anonymised pings under standard contractual clauses.
Your rights
You can request a copy of what we hold, fix it, delete it, withdraw consent, or object to processing. You can also lodge a complaint with the Croatian data protection authority (AZOP). Email kresimir.galic@fronttribe.com — we reply within 30 days.
Updates
When the substance of this note changes, we bump the date at the top and clear stored consent so you re-confirm in the banner. Cosmetic edits don't reset consent.
What's set on your device
| Name | Duration | Purpose |
|---|---|---|
| ft.consent.v1 | 1 year | Stores your banner choice. First-party, our domain only. Strictly necessary. |
| _ga | 24 months | Google Analytics — visitor identifier. Only set if you accepted analytics. |
| _ga_<id> | 24 months | Google Analytics — session state. Only set if you accepted analytics. |
Data requests
For access, correction, deletion, or any other GDPR request, write directly. No ticket form, no portal — just an email you'll get an answer to.