Privacy and Cookie Policy
Effective from July 26, 2026.
Who is responsible for your data
The controller of reprapua.makerhub.org is Maker Hub NGO, the organizer of RepRapUA Fest #4 (Kyiv, Ukraine). You can reach us about anything on this page through the form on the Contacts page or by email at .
Cookies we use
Necessary — always active, the site cannot honour your choice without them:
- rru_consent (browser localStorage) — stores your decision about cookies so that we do not ask again. It stays until you clear site data.
Analytics — enabled only after you press "Accept all":
- _ga — Google Analytics 4, distinguishes visitors, up to 2 years.
- _ga_G-1EFG6KXB1F — Google Analytics 4, session state, up to 2 years.
- _clck — Microsoft Clarity, distinguishes visitors, up to 1 year.
- _clsk — Microsoft Clarity, groups actions within one visit, 1 day.
Microsoft Clarity gives us anonymous heatmaps — where people click on a page and how far they scroll — together with recordings of movement through the page. We use this to understand which sections of the festival site are found and which ones are missed. The recordings contain neither typed text nor the contents of form fields: Clarity masks them in the browser itself.
Until consent is given, neither Google Analytics nor Microsoft Clarity is loaded at all: your browser does not contact Google or Microsoft servers, does not send them your IP address, and stores no identifiers. The website fonts are also served from our own server, not from Google.
Two forms on this site are hosted on Google Forms — visitor registration in the Tickets section and the exhibitor application in the Exhibitors section. Google sets cookies of its own in them, which is why they do not load by themselves: until you press "Load the form here", the page makes no request to Google at all. You can open a form in a new tab instead — then the cookies are set by Google, not by our site.
What data is collected
- Analytics (with consent): anonymous usage statistics — which pages were opened, approximate region, device and browser type, referral source. We do not see names or contact details of visitors.
- Clicks to partner websites (no consent needed, because no cookies): when you click a partner logo, our own server adds one to that partner counter. This is how we show festival partners how many people went to them. It is an ordinary entry in our server log: no cookies, no identifier and no profiling — we cannot link these clicks to each other or to a particular person. Server logs contain an IP address, as on any website, and are kept for no longer than 30 days; only anonymous totals reach the statistics.
- Contact form: name, email, subject and message — only what you type yourself, and only to reply to your request.
- Ticket notification form: name, email, and phone number. We use them only for a single message about ticket sales opening and a reminder before the festival. The phone number lets us reach you if the email does not arrive. We send no third-party advertising.
- Visitor registration: email, first and last name, phone, city, social media links, who you are, and what you would like to see at the festival. We need them to let you in and to send you the programme and the details of the day.
- Exhibitor application form: contact details of the company or maker, booth requirements, and answers about your own equipment — only what you type yourself. We need them to agree on participation, issue an invoice, and plan the hall.
- Both forms run on Google Forms and responses arrive in our Google Sheets spreadsheets. You receive a copy of your own answers at the address you provide.
- Job application form: the position, your name, email, phone number, what you wrote about yourself, and a link to a CV or portfolio if you provided one. We need them only to review your application and reply to you. This data goes nowhere else.
- Server logs: IP address and request time, kept briefly for security and troubleshooting.
Legal basis
- Analytics — your consent (Art. 6(1)(a) GDPR), withdrawable at any time with one button.
- Handling your form message — your request and our legitimate interest in replying (Art. 6(1)(b) and 6(1)(f) GDPR).
- Visitor registration — your request to attend the event and our legitimate interest in organising entry and safety (Art. 6(1)(b) and 6(1)(f) GDPR).
- Exhibitor application — preparing a contract for festival participation (Art. 6(1)(b) GDPR). We only email you news if you tick the separate box in the form.
- Ticket sales notification — your consent (Art. 6(1)(a) GDPR), given by ticking the box in the form. You can withdraw it at any time: simply reply to our email or write to us.
- Job application — your request and the preparation of a possible employment relationship (Art. 6(1)(b) GDPR), confirmed by the box you tick in the form.
- Server logs — legitimate interest in keeping the site available and secure.
Who receives the data
- Google Ireland Ltd. — Google Analytics 4 (and only if you gave consent), plus Google Forms and Google Sheets for exhibitor applications. Data may be processed outside the EU under the EU-US Data Privacy Framework.
- FormSubmit — the service that delivers contact form messages, ticket notification signups, and job applications to us.
- Hosting provider — the website server is located in the European Union.
We do not sell data, do not share it with advertisers, and make no automated decisions about you.
Retention
Analytics data: up to 14 months in Google Analytics. Form correspondence and exhibitor applications: for the duration of festival preparations and one year afterwards. Ticket notification contact details: until the festival and three months afterwards, then deleted. Job applications: six months after the position is closed, then deleted. Server logs: up to 30 days.
Your rights
You have the right to know what data we hold about you, to correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent. Just write to us and we will reply within one month. If our answer does not satisfy you, you may complain to the Ukrainian Parliament Commissioner for Human Rights, or to the supervisory authority of your country in the EU.
Change your cookie choice
Press here at any time: