Privacy policy

How we protect your privacy, how we work with analytics data and what rights you have.

BlueOrca Websites

Privacy policy

This page is an English translation of the Czech privacy policy, which is the binding version in case of any discrepancy.

We take your privacy seriously. We use no advertising trackers, we pass no analytics data to third parties and our analytics system is not used to identify individual visitors.

The short version

  • We do not use Google Analytics.
  • We do not use analytics cookies.
  • We write nothing to your browser - no cookies and no storage.
  • We respect the Global Privacy Control and Do Not Track signals - with them switched on, we do not measure at all.
  • We do not use advertising or remarketing systems.
  • We do not pass analytics data to third parties.
  • We do not build advertising profiles of visitors.
  • We do not create device fingerprints.
  • We do not track visitors across visits.
  • We are interested in how the website works, not in who visits it.

1. Data controller

The data controller is:

Jan Matoušek
Company ID (IČO): 87712431
Dr. Martínka 1489/1, Hrabůvka, 700 30 Ostrava, Czech Republic
Email: info@blueorcawebsites.eu

This policy applies to the websites blueorcawebsites.eu, blog.blueorcawebsites.eu, admin.blueorcawebsites.eu, audit.blueorcawebsites.eu and metrics.blueorcawebsites.eu.

2. What personal data we process

We process personal data only when you provide it to us yourself, for example through the contact form, by email or by phone.

  • name,
  • email address,
  • phone number,
  • the content of your message or enquiry.

We use this data solely to communicate with you, to handle your enquiry or to fulfil our contractual obligations.

3. How we use analytics

Most modern websites use third-party analytics and advertising systems that collect extensive data about visitors and often use it for advertising purposes. We have chosen a different approach. To measure traffic we use our own analytics system, BlueOrca Metrics, which we designed with an emphasis on privacy, transparency and collecting as little data as possible.

We measure how the website works. We do not track people.

Our aim is not to find out who visited the website. We only want to know how visitors use it, which pages work well and where we can improve the content, performance or user experience.

What data we record during a visit

For statistical traffic evaluation we may record:

  • the pages visited and their order during the visit,
  • the time spent on the website and on individual pages,
  • how far down the page you scroll,
  • interactions with the content and with important elements of the website,
  • the source of the visit (for example Google, Seznam.cz, Facebook or a direct visit),
  • UTM parameters of marketing campaigns,
  • the device type (mobile, tablet or desktop),
  • the device operating system,
  • the web browser,
  • the browser language,
  • the screen size category,
  • anonymous statistical data about activity during the visit, for example interactions with the content, navigation between pages, depth of engagement or technical events related to using the website.

We use this data solely for statistical traffic evaluation, improving the content, optimising performance and developing our services.

We write nothing to your browser

Our measurement script stores nothing on your device - it uses no cookies, no localStorage, no sessionStorage and no other browser storage. You can check this yourself in your browser's developer tools.

The individual page views are joined into one visit solely on our server (details below under Visit identifier). That is why no cookie consent bar pops up on this website - there is nothing to accept or decline. The information about measurement is here, on this page.

We respect Global Privacy Control and Do Not Track

If your browser has the Global Privacy Control (GPC) or Do Not Track (DNT) signal switched on, we do not measure your visit at all - the server discards the incoming data and no record is created.

What data we expressly do not collect

Our analytics system is not designed to identify people. We therefore deliberately do not collect or store data that could be used to create a unique device fingerprint or to recognise a particular visitor across visits.

  • We do not store your IP address or the exact browser string (User-Agent). The server only derives a temporary visit identifier from them using a one-way hash (see below) and discards the raw values.
  • We do not store the exact screen resolution.
  • We do not create device fingerprints.
  • We do not use technologies designed to uniquely identify visitors.
  • We do not track visitors across visits.
  • We do not use cookies or any browser storage - we write nothing at all to your device.
  • We do not build advertising or marketing profiles.

We do not pass data to third parties

Analytics data stays under our control and is not used for advertising purposes.

  • We do not pass analytics data to advertising companies.
  • We do not pass analytics data to social networks.
  • We do not sell analytics data to third parties.
  • We do not use advertising or remarketing systems.
  • Analytics data is not used for ad targeting.

Visit identifier

To join the individual page views into one visit, our server derives a pseudonymous technical visit identifier when the data arrives: a one-way cryptographic hash of the request's network data, computed with a secret key that changes every day. Neither the raw IP address nor the browser string is stored, and they cannot be derived back from the hash.

The identifier is used solely to join the pages viewed during one visit (at most 30 minutes from the last activity). Because the key changes daily, visits from different days cannot be linked to each other - the possibility of attributing a record to a particular device ends at the latest at the end of the day of the visit. The identifier is not shared between different websites.

4. Legal basis for processing

  • Communication and enquiries - legitimate interest or steps taken prior to entering into a contract.
  • Performance of a contract - Article 6(1)(b) GDPR.
  • Accounting and tax obligations - Article 6(1)(c) GDPR.
  • Statistical traffic evaluation - legitimate interest in improving the website and services.

5. Who may have access to the data

We do not sell personal data and do not provide it to marketing or advertising companies.

To the extent necessary, the data may be made available to:

  • the hosting and server infrastructure provider (WEDOS Internet, a.s., Company ID (IČO) 28115708),
  • the email service provider,
  • an external accountant or accounting system,
  • public authorities, where the law requires us to do so.

6. How long we keep the data

  • enquiries and communication usually for 12 months,
  • contractual documentation for the duration of the contractual relationship and afterwards as required by law,
  • accounting documents for the period required by law,
  • analytics records of visits for 14 months, after which we delete them - the period covers year-on-year comparison. The possibility of attributing a record to a particular device ends much earlier, at the latest at the end of the day of the visit (daily key change, see above), so for the rest of that period the data is only pseudonymous and serves aggregate statistics.

7. Your rights

You have the right to request access to your personal data, its rectification or erasure, restriction of processing, or to object to its processing.

If you have any questions, you can contact us at: info@blueorcawebsites.eu

8. Supervisory authority

If you believe that we handle your data in breach of the law, you have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ).

www.uoou.cz

Valid from 1 June 2026, as amended with effect from 17 August 2026 (measurement moved to a mode with no writing to the browser whatsoever).