Privacy policy

The controller for personal data on this site is:

• Name: Pluton Studio
• Represented by: Adrian Fusha
• Address: Prishtina, Kosovo
• Email: hello@pluton.studio
• Phone: +383 48 836 636

We collect only what the site needs to work and what we need to answer you. We never store an IP address: it is used for a moment by the abuse limiter and by a checksum that rotates daily, then discarded.

• No ad networks, no tracking pixels, no Google Analytics, no Tag Manager.
• Fonts are bundled at build time and served from our own domain, so no request goes to a font network.
• Push notifications exist only in our internal admin panel, for our own devices. Visitors never receive one.
• There is no automatic reply, no newsletter and no marketing sequence of any kind.

When you use the chat, your message and the last few turns of the conversation are sent to our AI provider, Groq, in the United States, which generates the reply. We then store the question and the reply in our own database so we can see what is being asked.

Please do not write anything confidential or any sensitive category of personal data there. For anything confidential, email is the right channel. We will delete a conversation on request.

Honest windows, rather than round numbers nobody keeps to.

• Enquiries and contact history: for as long as the relationship or the interest in one lasts. If nothing comes of it, we delete the record as soon as you ask.
• Invoices, contracts and the correspondence attached to them: for as long as tax and bookkeeping law requires us to keep them.
• Chat log and visit log: there is no automatic deletion job today. We review both at least once a year and delete what we no longer need. On request we delete the rows tied to your browser id immediately.

We do not sell data and we do not hand it over for advertising. The only parties involved are the providers that keep this site running:

Pluton Studio is in Kosovo, and Kosovo has no adequacy decision from the European Commission. We say so plainly, because that is exactly why the paperwork exists.

The data from this site sits on European infrastructure: our server functions are pinned to Frankfurt and the database is in eu-central-1. The engineer with access to it is in Prishtina, and the chat and email providers are in the United States. Both are transfers to a third country.

For client data we sign an Art. 28 GDPR processor agreement with the EU standard contractual clauses 2021/914 and, where Swiss law applies, the Swiss addendum. The detail is on the data processing agreement page.

This site sets no third-party advertising or tracking cookies. There are exactly these:

• pl_vid: a random id that recognises your browser so our own visit statistics do not count one person's two pageviews as two people. httpOnly, roughly 13 months, first-party only, never shared.
• pluton_lang: remembers a language choice so you are not redirected again. The site only reads it when it is there.
• The internal admin panel uses one session cookie and two interface cookies. Only we receive those after logging in, and any browser carrying our session cookie is excluded from every statistic.
• If you would rather not be counted, tell us or block the cookie: the site works exactly the same.

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. Any consent you give can be withdrawn at any time, with effect for the future.

An informal email to hello@pluton.studio is enough; we answer within a month, usually far sooner.

You can also complain to a supervisory authority: in Kosovo the Information and Privacy Agency (Agjencia për Informim dhe Privatësi), in the EU the authority of the country you live in, in Switzerland the Federal Data Protection and Information Commissioner.

When the technology behind the site changes, this page changes with it. The date of the last change is shown at the top; earlier versions are available on request.