Privacy notice
How builderz.dev handles personal data
This notice describes the data flows implemented on the current website. It does not turn a technical control into a legal compliance certification.
Effective July 23, 2026
Operator and privacy contact
Builderz is a technical delivery brand continued by Nyk and the current Builderz team. The former Builderz company entity is closed and is not presented as the current website operator. Client work begins only under a separate signed document that names the contracting party.
Send privacy questions or requests to builderz.dev@gmail.com. Include enough context to identify the relevant inquiry without sending identity documents unless they are requested through a secure follow-up.
Data the site processes
Project briefs and correspondence
When you contact Builderz, we process the name, work email, offer, budget range, target start, decision role, project context, and any other information you choose to include.
Request delivery and abuse prevention
Hosting and security systems process request data such as IP address, route, browser, and timestamps. The project-brief endpoint uses short-lived rate limits and a duplicate-submission digest to prevent abuse.
Site measurement and optional enhanced analytics
Builderz always measures anonymized page views and Core Web Vitals through cookieless Vercel Web Analytics and Speed Insights. After you allow enhanced analytics, the site also records bounded site events, attribution, and experiment assignment. Form names, email addresses, and messages are not included in analytics events.
Privacy and interface choices
The browser stores your privacy choices and may store a theme preference. External YouTube or Vimeo players remain blocked until you allow external media.
Purposes and processing grounds
Project-brief data is used to respond to your request, assess fit, take requested steps before a possible contract, and manage a later client relationship. Request data is used to deliver and protect the site and prevent abuse. Analytics, performance measurement, and external media are controlled by your recorded preference.
Depending on the context, processing may be based on your request before a contract, performance of a contract, consent, legitimate interests in operating and protecting the site, or a legal obligation. The applicable basis and any required balancing assessment remain subject to the actual facts and qualified legal review.
Providers and external destinations
Vercel
Website hosting, request security, cookieless Web Analytics and Speed Insights, and optional enhanced event measurement.
Google Workspace / Gmail
Delivery and handling of project briefs and subsequent correspondence.
Upstash
Short-lived abuse controls, operational counts, and bounded sales-opportunity records that omit the submitted name, email, and project message.
Sanity
Public portfolio, service, and article content rather than visitor profiles.
Calendly, Telegram, X, GitHub, YouTube, Vimeo, and other external sites apply their own notices after you open them. Where a provider processes data outside your country, its contractual and legal transfer safeguards apply and should be reviewed for the relevant use.
Retention and minimisation
Project-brief rate-limit data expires after 60 seconds and the duplicate digest after 10 minutes. Operational counts expire after 8 days. Aggregated acquisition counters expire after 40 days, and bounded opportunity records after 120 days.
Project briefs and correspondence are kept only while needed to assess, respond to, or administer the relationship, and longer where a legal or contractual record must be retained. A privacy request can be used to ask for deletion where it applies.
Your choices and rights
Depending on your jurisdiction and the processing context, you may:
- ask what personal data is processed and request a copy
- request correction of inaccurate information
- request deletion or restriction where the law provides it
- object to processing in applicable circumstances
- request portability where it applies
- withdraw consent for future optional processing
You may also raise a concern with the data-protection authority responsible for your location. Withdrawing consent does not affect processing that occurred before withdrawal.
Protection, children, and changes
The site uses encrypted transport, restricted administration, bounded inputs, rate limits, and data-minimised event contracts. No internet service can promise absolute security.
The site is intended for business users and is not directed to children. This notice may change when the site, providers, or operating model changes. The effective date above identifies the current version.