Privacy notice
Last updated: 20 August 2026
The short version
This site has no analytics, no advertising trackers and no embedded third parties. The only personal information we receive is what you choose to type into the contact form, and it goes straight to our own inbox so we can reply to you.
Who is responsible
Nocturne Voss, an independent web studio. You can reach us at the address at the bottom of this page for anything on this notice, including a request to see, correct or delete what we hold.
What we collect
Only two things.
- What you enter in the contact form: your name, your email address, and optionally your company, an indicative budget, a project type and your message.
- Your IP address, read from the request when you submit the form. It is held in memory for sixty seconds to stop one visitor sending the form dozens of times, and it is never written to a database, a log file or the email we receive.
Why we use it, and on what basis
To read your enquiry and reply to it. Nothing else. We do not add you to a mailing list, we do not build a profile, and we do not pass your details to anyone selling anything.
Where the GDPR applies, our basis is taking steps at your request before entering a contract, together with our legitimate interest in answering people who contact us. Where Russian law 152-FZ applies, we ask for your consent on the form itself, and you can withdraw it at any time by emailing us.
Where it goes
The form submits to this site's own server function, which sends the contents as an email to the studio inbox over an authenticated SMTP connection. It is not written to any database, because this site does not have one.
Two suppliers necessarily see the data in transit: our hosting provider, Vercel, which runs the function, and our email provider, which carries and stores the message. Both operate servers outside Russia. If that matters for your enquiry, email us directly instead of using the form.
How long we keep it
Your message stays in our inbox for as long as the conversation is useful, and is deleted on request. Enquiries that do not lead to work are cleared out periodically. Because there is no database, deleting the email deletes the record.
Cookies
One cookie, named `locale`. It is created only when you press the language switcher, it stores nothing but `en` or `ru`, and it lasts a year so the site opens in the language you picked. It is not used to identify or track you, so there is no cookie banner to click through.
Deleting it in your browser settings simply returns the site to its default language.
What this site does not do
- No analytics of any kind. No Google Analytics, no Yandex Metrica, no Vercel Analytics, no self-hosted alternative.
- No advertising pixels, no remarketing, no fingerprinting.
- No third party embeds. Fonts are downloaded when the site is built and served from our own domain, so your browser never contacts a font provider.
- No selling or sharing of anything you send us.
Your rights
You can ask us what we hold about you, ask us to correct it, ask us to delete it, object to us holding it, or withdraw consent. Email us and we will do it. No form to fill in and no account to create.
If you are in the EU or UK and you think we have handled something badly, you can also complain to your national data protection authority.
The work shown on this site
Screenshots and descriptions of client projects are published as portfolio material. They show public pages of sites we built. Any client work covered by a confidentiality agreement is shown without naming the client.
Changes
If we change how any of this works, this page changes with it and the date at the top moves. There is no archive of previous versions, so if a specific wording matters to you, keep a copy.