Privacy policy
Version of October 5, 2026
1. Who processes your data
The controller of personal data on x3red.com is X3RED, Aleksandr Zhivitsky, Warsaw, Poland. For any questions about your data, write to [email protected].
We process data in accordance with the EU General Data Protection Regulation (GDPR) and Polish law.
2. What data we receive
- Requests sent through the website form: name, company website, email, messenger contact or phone number (if you provide one), ad budget, start timeframe, engagement format and a description of your task. You enter all of this yourself.
- Technical data of the request: country and city based on your IP address, browser type, language and landing page, referral source and ad parameters (UTM, gclid, fbclid, yclid). We need this data to understand where a request came from.
- Call bookings through Calendly: name, email and the answers you enter in the Calendly window. This data is processed by Calendly LLC and passed on to us.
- Visit data: anonymized statistics on page views and on-page actions through Google Analytics 4 and Yandex Metrica, as well as Meta pixel events (page view, request, call booking, contact click), if you have consented to this (see the “Cookies and analytics” section for details).
3. Purposes and legal bases
- To confirm receipt of your request by email, respond to it, hold a call and prepare a proposal: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
- To measure which pages and ad channels perform and to improve the website: with your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time.
- To protect the form from spam and abuse: our legitimate interest (Art. 6(1)(f) GDPR).
We do not sell personal data and do not use it for automated decision-making that produces legal effects for you.
4. Who we share data with
We use services that process data on our behalf:
- Cloudflare, Inc. — website hosting and form processing;
- Google LLC and Google Ireland Ltd. — email, the request spreadsheet (Google Workspace), Google Analytics 4, Google Tag Manager;
- YANDEX LLC — Yandex Metrica;
- Meta Platforms Ireland Ltd. — the Meta pixel and the Conversions API: measuring and showing ads on Facebook and Instagram;
- Calendly LLC — call booking.
Some of these services process data outside the European Economic Area, including in the US and Russia. Transfers to the US rely on the EU Standard Contractual Clauses or on the EU–US Data Privacy Framework where it applies. Data is sent to Yandex Metrica only with your consent to analytics cookies, and to Meta only with your consent to advertising cookies. If you have submitted a request and given that consent, we send Meta, through the Conversions API, your hashed (SHA-256) email, name, country and city, along with your IP address, browser type and Meta cookie identifiers, so we can understand which ads bring in requests.
5. How long we keep data
- Requests and correspondence: up to 3 years after the last contact if no contract is concluded between us. If a contract is concluded, for the term of the contract and for the periods required by tax and accounting law.
- Google Analytics 4 data: 14 months.
- Yandex Metrica data: in accordance with Yandex’s policies.
- Meta pixel and Conversions API data: in accordance with Meta’s policies.
6. Cookies and analytics
Visitors from the EEA, the UK and Switzerland see a banner: analytics and advertising cookies are enabled only after you click “Accept”. Until then, Google Analytics runs without cookies (Consent Mode v2), and Yandex Metrica and the Meta pixel are not loaded.
| Name | Service | Purpose and duration |
|---|---|---|
| x3_consent | X3RED | Remembers your cookie choice. Stored in your browser until cleared. |
| x3_attr | X3RED | Saves the ad parameters of your visit so they can be attached to your request. Stored in your browser until cleared. |
| _ga, _ga_* | Google Analytics 4 | Distinguishes visitors and sessions. Up to 2 years. |
| _gcl_* | Links a visit to an ad click. Up to 90 days. | |
| _fbp, _fbc | Meta | Link a visit to ads on Facebook and Instagram. Up to 90 days. |
| _ym_*, yandexuid | Yandex Metrica | Distinguish visitors and sessions and record on-page actions. Up to 1 year. |
| Calendly cookies | Calendly | Make the booking window work. Set only when you open the calendar. |
7. Your rights
You have the right to request access to your data, its rectification, erasure, restriction of processing and portability, to object to processing, and to withdraw your consent. To do so, write to [email protected] and we will reply within 30 days.
If you believe we are violating your rights, you can lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), uodo.gov.pl.
8. Changes
We may update this policy. The current version is always available on this page, and its date is shown at the top.
