Privacy & Cookies
What happens to your data when you visit 123done.lt or get in touch with DONE.
Updated 14 September 2026
Who is responsible
DONE is operated by Deividas Leilionas, carrying out individual activity under certificate No. 1527530 in Lithuania. He is the controller of the personal data described here. For privacy questions or requests, email hello@123done.lt.
Visiting the website
Our hosting provider, Vercel, processes technical request data such as IP addresses, requested URLs, timestamps and browser information to deliver and protect the website. This is based on our legitimate interest in operating a secure, reliable website (GDPR Article 6(1)(f)). Technical records are kept for operational troubleshooting and security purposes, with retention determined by the relevant hosting log service and any incident that needs investigation.
Contacting DONE
The contact panel prepares an email draft; it does not submit your message to a website backend. Text entered in that panel stays in the current page until you choose an email option. If you open Gmail, the draft is passed to Google; if you choose your mail app, it is passed to that app. You decide whether to send it.
When you email us, we process your email address, name and the details you provide to answer and discuss your project. The basis is taking steps at your request before a contract (Article 6(1)(b)), or our legitimate interest in answering other business correspondence (Article 6(1)(f)). Providing this information is voluntary, but we need a way to reply. Please avoid sending sensitive personal information unnecessarily.
Correspondence is handled through Hostinger email and Google Gmail. We retain it while the enquiry or business relationship is active, and afterwards only where needed for follow-up, legal record-keeping or establishing, exercising or defending legal claims. Retention depends on the type of correspondence and applicable statutory obligations or limitation periods.
Optional website analytics
Google Analytics 4 uses Advanced Consent Mode on our English and Lithuanian landing pages. Before a choice and after Reject, the Google tag sends limited cookieless measurement signals, including consent state and page/technical information. These support aggregate measurement and, where eligible, modelling; they do not give us an individual browsing history for visitors who decline. Accept allows analytics cookies and fuller visit, device and approximate-location measurement. The legal basis for analytics cookies is your consent (Article 6(1)(a)).
We do not enable advertising features, Google Signals or automatic form tracking. Our page-view implementation excludes URL query strings and fragments and reduces the referring URL to its origin. We do not send the contact panel’s text or email addresses to Analytics. Google receives technical network information when its service is contacted.
User- and event-level Analytics data is subject to the property’s retention settings, with a maximum of 14 months for this standard GA4 property. Aggregated reports may be retained longer. Cookie lifetime is separate from server-side data retention. Search Console supplies search-performance reports; it does not add a visitor tracking script to this website.
Cookies and local storage
The following storage is used by our implementation. Analytics cookies are optional; the local preference only remembers your decision. Rejecting analytics does not prevent you from using the website.
- done.analytics-consent.v1
- Local storage · DONE
Remembers Accept/Reject and the decision date. Valid for 180 days; may remain in browser storage until replaced or cleared. - _ga
- Cookie · Google Analytics
Distinguishes browsers for analytics. Only after consent. Up to 180 days from setting/renewal. - _ga_CSVPPJ4WF0
- Cookie · Google Analytics
Maintains Analytics session state. Only after consent. Up to 180 days from setting/renewal.
Your choice
You can accept or reject analytics in the banner and reopen the choice using the footer’s Analytics cookies control or the button on this page. Rejection disables analytics cookie storage and removes the GA cookies our site can access. Limited cookieless Google measurement signals continue. Withdrawal does not affect the lawfulness of processing before withdrawal or automatically erase data already received by Google.
Your consent preference expires after 180 days. Clearing browser storage may make the banner appear again. The preference is specific to this browser/device.
Providers and international processing
Vercel hosts the website, Google provides Analytics, Search Console and Gmail, and Hostinger provides our business email. These providers may process information outside the European Economic Area. Their applicable data-processing terms describe transfer safeguards, including Standard Contractual Clauses and adequacy mechanisms where applicable. Contact us for information about the safeguards relevant to your data. We do not sell your personal data.
Your rights
Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your personal data; object to processing based on legitimate interests; and withdraw analytics consent at any time. Email hello@123done.lt. We may need proportionate information to confirm your identity. We normally respond within one month; the GDPR permits extensions in certain cases.
You can complain to Lithuania’s State Data Protection Inspectorate (VDAI), or the supervisory authority in the EU/EEA country where you live, work or believe an infringement occurred. We do not make decisions about you with legal or similarly significant effects solely by automated processing.
Other websites and updates
Portfolio and social links take you to other websites, whose own privacy notices apply. This notice covers DONE’s website and related enquiries, not the client platforms we build. We update this page when our processing changes; the date above identifies this version.