Privacy.

1. Who is responsible

possible OÜ is the controller responsible for the processing described in this notice. We are an Estonian private limited company, registry code 17593518, at Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia.

For privacy questions or requests, contact hello@possible-hq.com. This notice covers this company website and correspondence with the studio, not any separate app or service that has its own privacy notice.

2. When you visit

We use Cloudflare to host, deliver and protect the website. Technical data, such as your IP address, requested URL, request time, browser and device information, response status and security events, is processed to deliver pages, diagnose errors and prevent abuse.

Our legal basis is our legitimate interest in operating a reliable and secure website (Article 6(1)(f) GDPR). Connection data is necessary to deliver the website to your browser.

Cloudflare Workers application logs are automatically retained for up to seven days under the platform's current retention limits. Cloudflare separately processes network and security data under its own privacy policy; that data can have different retention periods.

3. When you contact us

If you email us, we receive your email address, name if supplied, message, attachments and associated email metadata. Our domain email uses Apple's iCloud Mail. We use this information to respond, discuss projects and manage our business relationship.

For steps you ask us to take towards a contract with you, the legal basis is Article 6(1)(b) GDPR. For other correspondence, including contact on behalf of a business, it is our legitimate interest in answering inquiries and managing professional relationships (Article 6(1)(f)). Where a legal record-keeping obligation applies, we rely on Article 6(1)(c).

Providing information by email is voluntary, but we need enough information to answer your request. Please do not send sensitive information that is unnecessary for your inquiry.

We retain correspondence for as long as needed to resolve your inquiry and any related follow-up or ongoing business relationship. Longer retention may be necessary to meet applicable record-keeping duties or establish, exercise or defend legal claims. The nature of the correspondence and those obligations determine the retention period.

4. Providers and international processing

Cloudflare receives technical website data; Apple receives the messages and metadata handled by iCloud Mail. These providers use international infrastructure, so information may be processed outside the European Economic Area, including in the United States. We do not promise EU-only storage.

The providers describe their international transfer safeguards, including applicable adequacy decisions and standard contractual clauses, in the Cloudflare Data Processing Addendum and Apple Privacy Policy. You can contact us for further information about the safeguards relevant to your data.

We may also disclose relevant information where required by law or necessary to establish, exercise or defend legal claims.

5. Cookies and tracking

Our website code does not set cookies or use local storage. We do not use advertising pixels, visitor-tracking analytics, external fonts or embedded third-party media. Cloudflare may use necessary security cookies when protecting the website; see Cloudflare's cookie information.

There is no marketing or analytics cookie consent to give on the current site. If we introduce features that require consent, we will ask before activating them and update this notice.

6. Your rights

Subject to the conditions in the GDPR, you can request access to, correction or deletion of your personal data, restriction of processing and data portability. You can object to processing based on legitimate interests for reasons relating to your particular situation. If processing is based on consent, you can withdraw it at any time without affecting earlier lawful processing.

Write to hello@possible-hq.com to exercise your rights. We may need to verify your identity before responding. We do not use your data for automated decisions that produce legal or similarly significant effects.

You can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the supervisory authority in the country where you live or work, or where you believe an infringement occurred. You do not have to contact us first.

7. Keeping this notice current

We will update this page when the website or our handling of information changes. The date above identifies the latest version.