Privacy Policy
Effective date: 17 October 2026
On this page
Controller and Scope
ANODA OÜ (Estonian registry code 16026674; VAT number EE102281468), Kaupmehe tn 7-120, 10114 Tallinn, Estonia, is responsible for personal data collected through anoda.mobi. This policy covers the website, contact enquiries, file attachments, newsletter subscriptions and optional website analytics.
Information We Process
If you contact us, we receive the information you choose to provide, which may include your name, email address, company, project details, messages and files. If you subscribe to updates, we receive your email address, the source of the subscription and a record of your request.
The site and its service providers also process technical information needed to deliver and protect the site, such as IP address, request time, page address, browser and device information. Website analytics also processes page visits, interactions, an anonymous visitor identifier and session recordings as described below, respecting your browser’s Do Not Track setting.
Please do not send passwords, sensitive personal data or confidential third-party material through a public form. Contact us to agree a suitable transfer method if your enquiry requires it. Required contact details are needed so we can respond; other information and attachments are optional.
How We Use Your Information
We use contact details, messages and attachments to review and respond to an enquiry and, if requested, discuss a potential project. The legal basis is taking steps at your request before a possible contract or our legitimate interest in responding to a business enquiry, as appropriate. Sending an enquiry does not subscribe you to updates.
If you subscribe, we use your email address with your consent to send newly published blog content and relevant ANODA company updates. We do not add subscribers or people who contact us to unrelated sales campaigns. You may unsubscribe at any time.
We process technical information to deliver, secure and troubleshoot the site. We use website analytics to understand how pages are used and improve the website. We do not sell personal data or use it for cross-site advertising.
Analytics, Cookies and Session Replay
We use PostHog through an EU endpoint for website analytics and session replay. Analytics starts when you visit the site and respects your browser's Do Not Track setting. PostHog uses first-party cookies and browser storage to keep an anonymous visitor and session identifier, record page visits and interactions, and recreate sessions so we can diagnose usability problems.
We do not intentionally send the contents of contact, newsletter or file-upload fields to analytics. Sensitive input values are masked before replay data leaves the browser, and analytics URLs are sanitised to remove common personal query values. Session replay is used to understand interaction patterns, not to identify visitors by name.
We also use Snitcher and Leadfeeder for company-level visitor identification. These services process network and visit information, including IP addresses, page URLs, referral and campaign information, visit times and browser identifiers. This helps us understand which companies explore our services and case studies. A company match does not tell us which individual visited or establish that the company intends to buy. Our company-identification setup does not send the contents of contact, newsletter or upload fields to these services.
Where Information Is Processed
Our CRM and PostHog analytics use EU-hosted services. Cloudflare operates a global network and may process request and traffic metadata outside the European Economic Area. Where a transfer outside the EEA requires safeguards, we rely on an applicable adequacy decision or contractual safeguards. Contact us for information about a transfer relevant to your data.
How Long We Keep Information
- If an enquiry receives no reply and no engagement begins, attached files are deleted within 30 days. Contact details and the enquiry record are deleted or irreversibly anonymised no later than one year after the last meaningful contact, unless a legal obligation or documented dispute requires longer.
- If an enquiry becomes a project, project correspondence and materials are handled under the client agreement, including any separately agreed confidentiality or retention terms.
- A subscriber address is kept while the subscription remains active. After an unsubscribe request, we retain only the minimal record needed to honour the opt-out or demonstrate compliance.
- Analytics events are deleted or anonymised within 12 months. Session recordings are retained for no more than 30 days. Security and delivery logs are kept only as long as needed to operate and protect the service or meet a legal obligation.
Copies in provider backups may remain until the provider's normal backup cycle expires and are not used for ordinary business access during that period.
Your Rights and Choices
Depending on the law that applies, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, or withdraw consent. We may need to verify your identity and may have a lawful reason to retain particular records.
You may also complain to the Estonian Data Protection Inspectorate or the supervisory authority in the EEA country where you live or work, or where an alleged infringement occurred.
Security and Children
We use access controls and other reasonable technical and organisational measures to protect information, although no internet service can guarantee absolute security. This business website is not directed to children.
Changes to This Policy
We may update this policy when the site or our practices change. The effective date above identifies the version in force. If a change requires a new analytics choice, we will ask again before loading optional analytics.
Contact Us
For privacy questions or requests, email hello@anoda.mobi. The contact is Oksana Kovalchuk, Managing partner, ANODA OÜ.