Privacy
Privacy policy
1) Overview
MalixCode offers web design and development services and accepts project inquiries. This policy explains how we handle your information when you browse the website, send a project inquiry, ask a quick question, request payment details, or contact us directly.
2) Information collected
- Basic technical information that may appear in hosting and security logs: your IP address, browser and device type, date, time, and the URL you visit.
- Project inquiries: your name, whether you already have a website, its URL if you provide one, preferred contact method, email address or WhatsApp number with country code, project description, and consent confirmation. Earlier inquiries may also contain a phone number or Telegram contact. If you enter a promo code, we also save that code. For a previously issued personal code, we also save the recipient’s email address.
- Quick questions: your topic, message, first name, preferred reply method, email address or WhatsApp number with country code, consent confirmation, language, and page path. Query parameters and fragments, the extra parts of a URL after ? or #, are removed from the page path.
- Requests for payment details: your name, email address, phone number, the package you agreed on, and consent confirmation.
- Supported campaign information: UTM parameters, GCLID, GBRAID, WBRAID, gad_source, gad_campaignid, FBCLID, MSCLKID, the page path, and the URL of the page that sent you here. Query parameters and fragments are removed from that referring URL.
- Partnership inquiries: your name, contact details, and any project information you send directly to MalixCode.
We save submitted requests in protected server storage. They are available through a private admin area.
The payment details form does not collect bank account, card, digital wallet, or payment account credentials.
3) How information is used
- To review your request and reply using the contact method you chose.
- To review your question and reply to the email address or WhatsApp number you chose.
- To contact you after a request for payment details so the MalixCode owner can personally confirm who should receive the payment and the exact instructions.
- To answer partnership inquiries and discuss projects with partners.
- To operate the site, prevent spam, and troubleshoot technical problems.
- To measure how people use the website and how they found it, without personal form details, after you separately agree to analytics.
4) Browser storage and traffic sources
- Your browser saves your privacy settings and a record of your latest choice in local storage until you change your choice or clear your browser data. The record includes the time, format version, your analytics and advertising measurement choices, and Global Privacy Control status. It is not sent to a separate server log.
- Before you agree to analytics and advertising measurement, cleaned UTM parameters, the referring source, and page path may stay in the open page’s memory only. Advertising identifiers are excluded, and traffic source information is not saved in browser storage. After you separately agree to advertising measurement, your browser saves the first and most recent traffic sources in session storage and sends them with an inquiry. This includes supported advertising identifiers from the current URL. Identifiers from pages visited before consent are not recovered. Rejecting or withdrawing consent, or sending a Global Privacy Control signal, removes saved traffic source information and advertising identifiers. Unsupported parameters, query parameters and fragments from the referring URL, and recognizable email addresses or tokens are discarded.
- Your browser remembers whether the quick-question prompt has appeared only for the current session. A draft question stays in the open panel’s memory and is not saved in browser storage.
- The URL (/ or /ru) sets the language. Your browser does not save a separate language preference.
- If Google Analytics 4 is set up and you agree to analytics, it may set _ga cookies. Advertising measurement is a separate, optional choice that requires analytics. It allows advertising storage and conversion measurement. Advertising personalization stays off. If you decline analytics or send a Global Privacy Control signal, the Google Analytics script does not load, and the site removes Google measurement cookies it can access. Previously saved consent to analytics alone does not turn on advertising measurement.
5) Service providers
- Vercel provides hosting, site delivery, and technical logs.
- Neon provides a protected database for inquiries and previously saved promotional records when the live site’s database is connected.
- Resend sends notifications about new inquiries to the site’s designated inbox. It also previously sent requested Arcade verification and promo code emails. New Arcade emails are turned off.
- Google Analytics 4 runs only if a valid measurement ID is set up, analytics is enabled in the site settings, and the visitor has agreed to analytics.
- Clutch provides the client reviews embedded on the homepage. The review widget loads as you scroll near that section. Your browser then contacts Clutch and sends your IP address, technical browser information, and the page’s domain and path. Clutch delivers the widget through its own systems, including Cloudflare. Information from the project form is not sent to the widget.
When the accounts are linked, Google Analytics 4 (GA4) events may be used to measure Google Ads campaigns. Events are sent only after you agree to analytics. Using them for advertising measurement also requires your separate agreement in privacy settings. Names, contact details, and form messages are excluded. The site does not load separate Google Ads or Meta Pixel tags. Advertising personalization is off. Fonts load directly from this website. MalixCode does not sell form data for money.
Read how Google uses data.
6) Partnership inquiries
To discuss working together, contact MalixCode directly by email or Telegram. We use the contact details and project information you send in that conversation. We no longer create new personal tracking codes. Previously collected records are kept as described below.
7) How long information is kept
There is currently no fixed schedule for automatically deleting inquiries. We keep requests as long as needed to review them, continue a conversation, manage a project, or maintain administrative records. Requests can be archived or deleted through the private admin area. Each provider’s settings determine how long it keeps technical logs. Traffic source information expires at the end of the browser session. Your privacy choices stay saved until you change them or clear your browser data.
8) Privacy choices and GPC
Optional analytics is off by default. You can accept, reject, or manage it in privacy settings. You can reopen those settings from the bottom of the website. A Global Privacy Control signal always counts as a request to reject optional analytics.
When you consent in the quick-question form, you allow us to use your question and contact details to reply. This is separate from optional analytics consent. You can send the form if you reject analytics. Agreeing to the form does not turn on analytics.
9) Security
The site uses HTTPS, private administrator sessions, server-side form checks, a hidden field to detect spam, limits on form submissions, protected storage, and security headers. No system can guarantee complete security. We collect only the information needed for the purposes described here.
10) Previously issued Arcade promo codes
Arcade is closed. Signup, email verification, new rewards, and Arcade emails are turned off. If you already have a code, you can enter it and the recipient’s email address in a project inquiry before its original expiration date.
Protected storage may still contain data from earlier participation: email addresses, technical identifiers for verification and preventing duplicate rewards, promo codes, issue and expiration dates, and service email contents and delivery status. This information was used to verify email addresses, issue and deliver rewards, prevent repeat participation, and check promo codes. A code’s expiration date is not the date its record is deleted. There is currently no fixed schedule for automatically deleting participation, reward, or email delivery records. Use the contact below to request access or deletion.
Earlier technical Arcade cookies could last up to 15 minutes for email verification, 30 days for sign-in, and 365 days for recognizing a browser. The retired game’s API no longer creates or reads them. Existing browser cookies expire at their original deadline or when you clear this site’s browser data.
11) Data requests and updates
To request access, correction, or deletion, email team@malixcode.com. This policy is updated when forms, providers, analytics, or actual data handling changes.
Learn how to confirm the payment recipient and instructions in the Payment verification rules.