Privacy & Cookie Notice
Last updated: 14 July 2026
This notice explains which personal data enablejavascript.io processes, why we process it, who receives it, how long it is kept, and the choices and rights available to you.
Who is responsible for your data
The data controller is:
MN Media s.r.o.Company ID (IČO): 24045764
Varšavská 715/36, Vinohrady
120 00 Praha 2, Czechia
Email: info@enablejavascript.io
Use that email for privacy questions and requests. We may ask for enough information to verify that a request concerns your data.
Data we process, purposes, and legal bases
Website delivery and security
When you request a page, our hosting provider receives normal web-request data such as your IP address, date and time, requested URL, referring page, browser and device headers, and diagnostic or security information. We use this to deliver the site, keep it reliable, investigate abuse, and protect the service. The legal basis is our legitimate interest in providing and securing the site (GDPR Article 6(1)(f)).
Web fonts
The site requests the Roboto font from Google Fonts. That request gives Google the network information your browser normally sends, including your IP address, browser headers, and the site origin or referrer supplied by your browser. We use the font to present a stable, readable interface. The legal basis is our legitimate interest in consistent and accessible presentation (GDPR Article 6(1)(f)). Google handles this request under its own privacy terms.
Site analytics — only if you select it
If you select Site analytics and save your choices, we
load Google Analytics 4 (measurement ID G-QHELW97DJ2).
It can receive your IP address for network delivery and approximate
location, browser and device information, page URL, referrer, consent
state, page views, and the event that a developer snippet was copied.
We use this to understand aggregate site use and whether visitors use
the supplied snippets. The legal basis is your consent (GDPR Article
6(1)(a)).
Google Analytics does not load before you allow Site analytics. The
page code keeps Google Signals disabled. You can decline without
losing access to any guide, and you can change your choice at any time through
.
Withdrawing consent updates its state, removes accessible first-party
_ga*, _gid*, and _gat* cookies,
and reloads the page so the next document contains no Analytics tag.
It cannot remove cookies stored on
Google-owned domains or undo processing that was lawful before withdrawal.
Contact form
If you contact us, we receive the name, email address, subject, message, and language you submit. The form also records the network address received by the server and UTC time for delivery diagnostics and abuse prevention. We use the data to receive, secure, and answer your request, comply with applicable law, and establish or defend legal claims where necessary. The legal basis is our legitimate interest in responding and protecting the form (GDPR Article 6(1)(f)); where your request concerns a possible contract, it is also necessary to take steps at your request (Article 6(1)(b)). The form handler sends the message to the reply mailbox; it does not subscribe the address to a mailing list.
Name, email, subject, and message are required to send the form; without them we cannot receive and answer the request. The language field selects the return page. The network address is collected automatically for rate limiting and security.
Recipients and service providers
| Recipient | Role | Purpose and data | Location / safeguards |
|---|---|---|---|
| The Hostinger contracting entity for the site account and its hosting subprocessors | Processor/service provider for hosted site data; it may separately control limited account, security, or legal-compliance data under its own terms | Website delivery, infrastructure, security logs, and the contact endpoint | Hostinger lists processing in the EU/EEA, UK, and other service locations; its DPA applies EU Standard Contractual Clauses where required. |
| Proton AG and its subprocessors | Processor/service provider for contact mail under the applicable account terms and DPA; it separately controls limited service-security data described in its terms | SMTP delivery and storage of contact correspondence in our Proton mailbox | Switzerland, which the European Commission recognizes as adequate; Proton's DPA also provides transfer safeguards where needed. |
| The Google entity applicable to Google Fonts | Independent recipient handling the font request under Google's own privacy terms | Roboto stylesheet/font delivery on each visit | Google may process data globally, including in the United States, using applicable adequacy decisions, the EU–U.S. Data Privacy Framework, and Standard Contractual Clauses. |
| The Google entity applicable to Google Analytics | Processor/service provider for Analytics customer data to the extent stated in the applicable Google data-processing terms; Google also describes limited independent processing in its product terms | Site analytics only after that purpose is selected | Google may process data globally using the transfer safeguards in its applicable terms. |
| Authorized MN Media personnel and professional advisers | Controller-authorized recipients; advisers may act as independent controllers under professional duties | Answering requests, operating the site, security, and legal compliance | Access is limited to what is needed for the stated purpose and subject to confidentiality or professional duties. |
We may also disclose data if required by law or a valid authority order, or where necessary to establish, exercise, or defend legal claims.
International transfers
Some providers operate outside the EEA. Switzerland currently benefits from an EU adequacy decision. For transfers to other countries, our providers rely on an applicable adequacy framework, including the EU–U.S. Data Privacy Framework where available, or European Commission Standard Contractual Clauses and supplementary safeguards. Provider transfer information is available in the policies linked below.
How long we keep data
- Consent choice: 365 days, or until you replace or delete the cookie. The same cookie records the notice version and choice time.
- Contact correspondence: kept while needed to answer and manage follow-up, and longer only where needed for a contract, unresolved dispute, legal claim, or legal obligation. The mailbox currently has no automated fixed-period deletion rule.
- Contact rate limiting: the active window is one hour. Older network-address/time entries are pruned on the next form request and may remain in the host's temporary storage until that cleanup or the host's own temporary-file cleanup occurs.
- Google Analytics event- and user-level data: the property is currently configured for 14 months, with the user-data period reset when new activity occurs. If that account setting changes, the configured period in force applies. Aggregate reports are not deleted on the same schedule.
- Hosting and security data: retained under the Hostinger account settings and contract while needed to deliver and protect the service, troubleshoot incidents, comply with law, or resolve disputes. Limited residual backup or security data may remain for the provider-controlled period described in those terms.
- Google Fonts request data: retained by Google under its own privacy and logging rules; we do not receive or retain a copy.
Your data-protection rights
Subject to applicable law, you may:
- request access to and a copy of your personal data;
- ask us to correct inaccurate or incomplete data;
- ask us to erase data or restrict its processing;
- object to processing based on legitimate interests;
- receive data you provided in a portable format where applicable; and
- withdraw consent at any time without affecting earlier lawful processing.
Email info@enablejavascript.io to exercise a right. We normally respond within one month. You may also complain to your local supervisory authority. The Czech supervisory authority is the Czech Office for Personal Data Protection (ÚOOÚ).
We do not use your data to make decisions that produce legal or similarly significant effects solely by automated means.
Provider information
Changes to this notice
We will update this page and its date when our processing changes. If a change requires new consent, we will ask before enabling that processing.