Privacy Policy

Last updated: February 9, 2026

This policy explains what data is involved when you use tactalapaca.com, who has access to it, and what your rights are. We wrote this to be transparent, not to hide behind legal jargon.

The short version: we do not track you, we do not sell your data, and we collect as little as possible.


Who We Are

TacTalaPaca is an independent team based in Romania. We operate the website tactalapaca.com. If you have questions about your data, you can reach us through our Contact page.

Data We Collect Directly

We only collect data that you actively and voluntarily submit to us through forms on the site.

Data When What We Store
Form submissions When you fill out a form (e.g., enrollment, contact) The information you provide in the form fields, plus a timestamp

We do not ask for sensitive personal data. The forms are designed to collect only what is needed (such as a name, an email, and a message). We do not require government IDs, payment information, or anything of that nature.

What we do with form data:

Data We Do NOT Collect

To be completely clear:

Data Stored on Your Device

Some features save preferences and progress locally in your browser using localStorage or IndexedDB. This data never leaves your device and is never sent to us or anyone else.

What Purpose
Theme preference Remembers if you chose dark or light mode
Language preference Remembers your language selection
Navigation settings Remembers UI preferences like menu state
Tool data Saves your progress or settings in our browser tools (e.g., statistics, editor data, configurations)

You can clear this data at any time through your browser settings. We have no access to it.

Third-Party Services and Their Data Practices

While we do not collect data ourselves beyond form submissions, our site uses third-party services that may process some data independently. Here is what they are and what they may do:

Google AdSense (Advertising)

We display ads through Google AdSense to help fund the site. Google may:

Google's data collection is governed by Google's Privacy Policy. You can opt out of personalized ads at Google Ad Settings or use the NAI opt-out tool.

Cloudflare (Hosting and Security)

Our site is hosted on Cloudflare Pages. Cloudflare may process your IP address (for security and routing) and basic connection metadata. We also use Cloudflare Turnstile on forms to prevent spam. See Cloudflare's privacy policy.

Google Fonts

Some pages load fonts from Google's servers. Google may log your IP address when the font files are requested. See Google's Privacy Policy.

CDN Providers (cdnjs, unpkg, jsDelivr)

Our tools load open-source libraries from public CDNs. These CDN providers may log basic access information (IP address, request metadata) as part of standard web server operation.

External APIs

Some features request data from external APIs (e.g., game-related lookups). These requests may expose your IP address to the API provider, as is standard with any web request. We do not send any personal data to these APIs.

Donation Platform

We use a third-party donation widget. If you choose to support us, the donation service handles the transaction and is subject to its own privacy policy. We do not process or store any payment data.

Cookies

We do not set cookies ourselves for tracking purposes. However, cookies may be set by:

Source Type Purpose
Google AdSense Third-party Advertising and ad personalization
Google Translate Third-party Remembering translation preferences (on specific pages)
Cloudflare Third-party Security and bot protection

You can control and delete cookies through your browser settings at any time.

Service Worker and Offline Caching

Our site can be installed as a Progressive Web App (PWA). The service worker caches pages and assets on your device so the site loads faster and can work offline. This is purely a performance feature. No personal data is cached or transmitted through this mechanism.

Your Rights Under GDPR

If you are in the European Union or European Economic Area, you have the following rights regarding any personal data we hold:

Right What It Means
Access You can ask us what data we have about you
Correction You can ask us to fix incorrect data
Deletion You can ask us to delete your data
Portability You can ask for a copy of your data in a standard format
Objection You can object to how we process your data
Restriction You can ask us to limit processing of your data
Withdraw consent You can withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us through our Contact page. We will respond within 30 days.

Children's Privacy

We do not knowingly collect personal data from children under 16. If you believe a child has submitted data to us, please contact us and we will delete it.

Data Retention

Form submissions are kept in our database for as long as they are relevant to their purpose (e.g., processing enrollment requests). We may periodically clean out old data that is no longer needed. If you want your data removed, contact us and we will handle it.

Data Security

Your submitted data is stored in a Cloudflare D1 database, which benefits from Cloudflare's infrastructure-level security. The site is served over HTTPS. We take reasonable measures to protect your data, but no system is 100% secure.

Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top. Since our site changes frequently, this policy is written broadly to cover the site as a whole rather than listing every individual feature.

Contact

If you have any questions about this policy or want to exercise your data rights, reach out through our Contact page.