Last updated: July 2026
Data controller
Nodebrush AB is the data controller for personal data collected through this website. For questions about your data, contact: samuel@nodebrush.com.
What data we collect
When you submit the contact form on this website, we collect the following information:
- Subject (one or more topics from the list)
- Full name
- Email address
- Company name
- Your message
- Any files you choose to attach
This data is used to respond to your enquiry, which is our legitimate interest. The form fields are delivered to us by email and stored in our website database so we can locate submissions if email delivery fails. Attached files are forwarded with the email but are not stored in our database. For hosting, email delivery, and spam protection we use processors, listed on our sub-processors page. We do not use the data for marketing without your explicit consent.
Data retention and deletion
We delete your enquiry from our database no later than 24 months after we receive it, and sooner if you ask us to.
The form fields are also delivered to us by email. Because email is a distributed medium, copies may remain in mail infrastructure outside our direct control. We make reasonable efforts to delete those messages on request, but cannot guarantee removal from all transit and backup systems.
reCAPTCHA
This site uses reCAPTCHA, a service provided by Google LLC, to protect the contact form against spam and automated abuse. As of April 2026, Nodebrush AB acts as the data controller for reCAPTCHA data collected on this site, and Google processes that data solely on our behalf as a data processor under the Google Cloud Data Processing Addendum.
reCAPTCHA may collect hardware and software information such as device and application data, your IP address, and user interactions on the site. We have a legitimate interest in keeping the form free of bots, and the data is not used for anything else.
Cookies and analytics
This website uses two cookies, neither of which requires consent. lang stores your chosen interface language for one year so it isn't reset on every visit. _grecaptcha is set by reCAPTCHA on the contact form for the security check described above, only when you submit the form.
For analytics we run Umami on our own server. It records page views and basic device information without setting cookies and without using personal identifiers.
Your rights
Under GDPR you have the right to request access to your personal data, rectification, erasure, restriction of processing, and data portability. You also have the right to object to processing based on legitimate interest, and to lodge a complaint with a data protection supervisory authority.