PRIVACY & COOKIE POLICY
Last updated: September 22, 2026


Introduction

Metis+Craft ("we", "our", "us") operates https://metisandcraft.com (the "Website"). This Privacy Policy explains what data we collect, how we use it, and the rights you have under applicable law — including the EU General Data Protection Regulation (GDPR) and Italian Legislative Decree 196/2003 as amended.


Data Controller

YOSEFY BRATU DAN
metiscraft@hotmail.com


Information We Collect

When you contact us by email or telephone, we receive the contact details and information you choose to provide. Our website is hosted by Cargo, which processes technical information needed to deliver and secure the site, such as IP addresses and request information. See Cargo’s privacy policy.

Only if you agree to the relevant service in our cookie banner, Google Analytics and/or Microsoft Clarity collect usage information to help us understand and improve the Website.

This includes:

Pages visited and time spent.
Scroll, click, and interaction behavior.
Device type, browser, operating system.
General geographic location (country or city level).
Cookie identifiers and pseudonymous browser or session IDs.

Online identifiers and usage information may be personal data, even when they do not include your name. We do not describe this information as anonymous.


Legal Basis for Processing

Optional analytics are based on your consent (Article 6(1)(a) GDPR). Google Analytics and Clarity scripts do not load until you accept the relevant service. Rejecting optional cookies does not prevent you from using the Website.

Use the “Change cookie consent” link at the bottom of this Privacy & Cookie Policy page to change or withdraw your choices. On withdrawal, the affected tracking is disabled, accessible first-party analytics cookies are removed, and the page may reload to stop scripts already running. Withdrawal does not affect the lawfulness of earlier processing.

We process enquiries to respond to you or take steps towards a contract (Article 6(1)(b)), or under our legitimate interest in handling general correspondence (Article 6(1)(f)).

Where we rely on legitimate interest — for security, fraud prevention, or basic site functionality — we do so only for strictly necessary purposes and only where your rights do not override that interest.


Microsoft Clarity

If you accept Microsoft Clarity, Microsoft receives information about page views, clicks, scrolling, device/browser characteristics and interactions used to create heatmaps and session replays. Replays reconstruct interactions with page content; they are not recordings from your camera or microphone.

Our installation sends Clarity an analytics-consent signal when you opt in and keeps advertising storage consent denied. We use the results to improve the Website. We have not installed a separate Microsoft Advertising/UET tag as part of this setup. Microsoft’s processing is described in its privacy statement.

Microsoft processes this data in accordance with its own privacy statement: https://privacy.microsoft.com/privacystatement


Google Analytics

If you accept Google Analytics, Google receives page-view and usage information, including visited URLs, referring sources, device/browser information, approximate location and cookie identifiers. We use this to understand traffic and improve our content. Google Signals and advertising personalization are disabled in our website tag, and advertising consent remains denied. Google processes data in accordance with its privacy policy: https://policies.google.com/privacy

Google states that Analytics uses IP addresses from EU, UK and Swiss visitors to derive approximate location and discards them before logging. This does not make all analytics information anonymous. See Google’s regional privacy information.


Cookies

Cookies and similar browser storage remember information between visits. Our free, site-operated banner offers “Reject optional”, “Accept all”, and individual service choices, with optional services off by default. We do not use Axeptio to collect consent.

Necessary preference storage: mc_cookie_preferences_v1 in local storage records your choices, their date and version for six months. If persistent storage is unavailable, session storage may be used instead. It is stored in your browser, not sent to a separate consent-banner provider. Clearing site storage removes this record.

Google Analytics: _ga and _ga_* are first-party cookies used to distinguish browsers and maintain session information. Our tag sets a 180-day cookie lifetime, which may refresh on subsequent consented visits.

Microsoft Clarity: _clck identifies a browser for this site (normally up to one year), and _clsk connects page views within a session (normally one day). Microsoft describes additional cookies used by its services in its cookie documentation; actual cookies depend on consent and browser restrictions. Advertising storage is denied in our integration.

You can also delete or block cookies through your browser. We cannot directly delete cookies held on third-party domains. Cookie lifetimes are separate from providers’ server-side data-retention periods.


International Data Transfers

Cargo, Google and Microsoft may process information outside the European Economic Area, including in the United States. The applicable transfer mechanism depends on the provider and processing involved and may include an adequacy decision, where applicable, or Standard Contractual Clauses. Details are available in the providers’ linked privacy and data-processing information; you can contact us for information about safeguards relevant to your data.


How We Use the Information

We use collected data solely to:

Improve Website performance and usability.
Understand overall visitor behavior.
Optimize our products, services, and content.
Maintain Website security.

We do not sell personal data.


Data Sharing

We do not sell, rent, or trade personal data. Cargo provides hosting; Google and Microsoft receive analytics information only when the relevant optional service is enabled. Our communication providers process information when you contact us. Links to Instagram and LinkedIn take you to those services, whose own privacy policies apply.


Data Retention

Our Google Analytics property is currently set to retain event data for 2 months and user data for 14 months, with the user-data period reset on new activity. These controls do not affect most aggregated standard reports.

Microsoft’s current Clarity documentation specifies 30 days for playback data and 9 months for heatmaps/click data and labeled or favorited sessions. See Clarity retention details.

We keep enquiries for as long as needed to handle the enquiry and any resulting relationship or applicable legal obligations. Your browser’s cookie-choice record expires after six months.


Data Security

We take reasonable technical and organizational measures to protect the Website and its data from unauthorized access, misuse, or disclosure.


Your Rights

Under GDPR and Italian law, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data ("right to be forgotten").
Restrict or object to processing.
Data portability.
Withdraw consent at any time.
Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali — https://www.garanteprivacy.it).

To exercise applicable rights, write to metiscraft@hotmail.com. We may need information to verify your identity or locate records associated with a pseudonymous identifier.


Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be flagged on this page with an updated revision date.


Contact

Metis+Craft
metiscraft@hotmail.com
https://metisandcraft.com


Cookie Consent

Change cookie consent
Review your preferences or withdraw consent for optional analytics at any time.