Privacy & Cookie Policy

incl. Cookie Policy & Consent Notice

Last updated: 13 July 2026 · Version 1.0

This Privacy & Cookie Policy explains how Dark Project Limited collects, uses, and protects personal data when you visit darkproject.eu and its subdomains (the “Website”). It also serves as our Cookie Policy and Consent Notice.

At a glance

We are Dark Project Limited (Cyprus), the controller of your personal data — see Who we are.
The Website is a brand showcase: we do not sell products or run user accounts here — see Scope.
We use Google Analytics 4 and Google advertising features, which run only after you consent via our cookie banner — see Cookies and Consent.
You can reach us through our Support and Business forms — see Contact forms.
We do not sell your personal data — see Who we share data with.
You have rights over your data, including access, deletion, and objection — see Your rights.
Questions? Contact [email protected].

Who we are
Scope & definitions
Data we collect
Contact forms (Support & Business)
How we use your data
Cookies
Consent
Google Analytics & advertising
Who we share data with
International data transfers
Data retention
Your rights
UK users
US users
Children
Security
Changes to this policy
How to contact us

1. Who we are {#who-we-are}

In short: Dark Project Limited in Cyprus decides how your data is used and is responsible for it.

Dark Project Limited (“Dark Project”, “we”, “us”, “our”) is the controller of the personal data processed through the Website.

Company: Dark Project Limited
Registration number: HE 417023
Registered address: KIBC office 102, Profiti Ilias 4, 4046 Limassol, Cyprus
Privacy contact: [email protected]

We have not appointed a statutory Data Protection Officer, as we are not required to under Article 37 GDPR. For any privacy matter, please use the contact above.

You also have the right to contact a supervisory authority — our lead authority is the Office of the Commissioner for Personal Data Protection (Cyprus), and you may also contact the authority in your own country — see Your rights and UK users.

2. Scope & definitions {#scope-definitions}

In short: This policy covers darkproject.eu and all its subdomains. Here is what the key terms mean.

This policy applies to personal data we process when you visit or interact with darkproject.eu and any of its subdomains. It does not cover third-party websites we may link to, which operate under their own privacy policies.

Some subdomains may offer additional features, such as accounts or online ordering. Where they do, we also process the additional data needed to provide those features — for example, account, order, and payment details — to perform our contract with you (Art. 6(1)(b) GDPR), and we may publish a supplementary notice on the relevant subdomain.

Key terms used in this policy:

“Personal data” — any information relating to an identified or identifiable individual.
“Processing” — any operation performed on personal data (for example, collection, storage, use, or disclosure).
“Controller” — the party that determines why and how personal data is processed (that is us).
“Processor” — a party that processes personal data on the controller’s behalf (for example, our hosting and helpdesk providers).
“Cookies” — small files stored on your device — see Cookies.
“GDPR” / “UK GDPR” — the EU and UK General Data Protection Regulation, respectively.

3. Data we collect {#data-we-collect}

In short: Mostly anonymous analytics about how the site is used, plus anything you choose to send us through our forms.

We collect the following categories of personal data:

(a) Usage and analytics data — collected via Google Analytics 4 when you consent: pages viewed, actions taken, referring source, approximate location, device and browser type, and online identifiers set by cookies. Google Analytics 4 does not store your IP address; for visitors in the EEA and the UK, approximate location is derived without logging the IP.
(b) Advertising data — when you consent, Google Signals and Google advertising features may process online identifiers and audience or interaction signals to measure and personalize advertising and remarketing.
© Technical and server log data — our hosting provider records limited technical data (such as IP address, user-agent, and request timestamps) to keep the Website secure, available, and free of abuse.
(d) Information you provide through our forms — see Contact forms.
(e) Cookie and consent data — your cookie choices and records of your consent — see Cookies and Consent.

We do not intentionally collect special categories of data (such as health, biometric, or political data) through the Website. Please do not include such information in form messages.

4. Contact forms (Support & Business) {#forms}

In short: If you write to us through the Support or Business form, we use what you send to answer you. A separate, optional tick-box lets us follow up about service quality.

The Website offers two forms, which are provided and processed through our helpdesk provider (based in the EU):

Support form — fields: name, e-mail, country, product, subject, operating system, and your message. We use this data to receive and handle your support request (for example, technical assistance or warranty questions).
Business form — fields: name, e-mail, country, subject, and your message. We use this data to receive and respond to collaboration, partnership, and other business inquiries.

Tick-boxes on the forms:

The first tick-box confirms that you are providing your information so that we can handle your request, and that you have read this Privacy & Cookie Policy. Handling your request is necessary to respond to you, and providing the data is required to submit the form.
The second tick-box is optional. If you tick it, you consent to us using your e-mail to contact you about the quality of our service and your satisfaction. You can withdraw this consent at any time (see Your rights); withdrawal does not affect the handling of your original request.

The content of your message is voluntary — please share only what is necessary, and avoid including sensitive personal data.

5. How we use your data {#how-we-use}

In short: Every use has a specific legal basis under the GDPR — here they are in one table.

Purpose	Data used	Legal basis (Art. 6 GDPR)
Measure and improve how the Website is used (analytics)	Usage/analytics data (a)	Consent — Art. 6(1)(a)
Advertising, measurement, and remarketing	Advertising data (b)	Consent — Art. 6(1)(a)
Keep the Website secure, available, and free of abuse	Technical/server log data ©	Legitimate interests — Art. 6(1)(f)
Receive and handle Support requests	Support form data (d)	Contract / pre-contractual steps — Art. 6(1)(b); and/or legitimate interests in after-sales support — Art. 6(1)(f)
Respond to Business / partnership inquiries	Business form data (d)	Legitimate interests in responding to inquiries — Art. 6(1)(f); and/or pre-contractual steps — Art. 6(1)(b)
Optional follow-up about service quality	E-mail (d)	Consent — Art. 6(1)(a)
Keep records of consent (accountability)	Cookie/consent data (e)	Legitimate interests — Art. 6(1)(f)

Where we rely on legitimate interests, we have weighed those interests against your rights and freedoms, and you may object to such processing (see Your rights). Where we rely on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.

6. Cookies {#cookies}

In short: Cookies are small files on your device. Only strictly necessary ones run automatically; analytics and advertising cookies run only if you consent.

What cookies are. Cookies and similar technologies are small files or identifiers stored on your device when you visit the Website. We use them to keep the site working, to understand how it is used, and — with your consent — for advertising.

Cookie categories.

Strictly necessary — required for the Website to function and to remember your cookie choice. These do not require consent.
Analytics — help us understand how visitors use the Website (Google Analytics 4). Set only with your consent.
Advertising — used to measure and personalize advertising and remarketing (Google advertising features / Google Ads). Set only with your consent.

Cookies we use.

Strictly necessary

Cookie	Provider	Purpose	Duration
Consent cookie	Dark Project	Stores your cookie consent choice. Set once you make a choice in our cookie banner.	Up to 12 months

Analytics — set only with your consent

Cookie	Provider	Purpose	Duration
`_ga`	Google	Distinguishes unique visitors (Google Analytics 4)	Up to 2 years
`_ga_D9C5HDVLP1`	Google	Maintains Google Analytics 4 session state (our measurement property `G-D9C5HDVLP1`)	Up to 2 years

Advertising — set only with your consent

Cookie	Provider	Purpose	Duration
`_gcl_au`	Google	Links ad clicks to conversions (Google Ads)	~90 days
`IDE`	Google (doubleclick.net)	Ad measurement, targeting, and remarketing	Up to 13 months
`NID`	Google	Ad personalization and preferences	~6 months

Advertising cookies are set only when our Google advertising features are active and you have consented. Google Analytics 4 does not store your IP address.

We keep this list up to date; the exact cookies present may vary slightly as tools and configurations change.

Managing your cookies.

Use our cookie banner to accept or reject non-essential cookies, and to change your choice at any time — see Consent.
You can also control and delete cookies through your browser settings.
To opt out of Google Analytics across all websites, install Google’s Analytics Opt-out Browser Add-on.
To manage Google ad personalization, visit Google Ads Settings.
Blocking strictly necessary cookies may affect how the Website works.

For how Google processes analytics and advertising data, see Google Analytics & advertising. For transfers outside your country, see International data transfers.

7. Consent {#consent}

In short: Analytics and advertising cookies run only after you say yes. You can change or withdraw your choice at any time, with no effect on what happened before.

This section, together with our cookie banner, is how you give and manage consent for the processing that relies on it (see How we use your data).

What you consent to. When you first visit the Website, a banner asks whether you accept non-essential cookies. Your consent covers:

Analytics cookies and related processing (Google Analytics 4); and
Advertising cookies and related processing (Google advertising features), where active.

Strictly necessary cookies do not require consent and are always active.

How consent works.

Non-essential cookies and tags are blocked until you choose. We use Google Consent Mode (v2), so no analytics or advertising cookies are set before you accept.
The banner offers an “Accept all” and a “Reject all” option of equal prominence. Choosing “Reject all” means only strictly necessary cookies are used.
Your consent is freely given, specific, informed, and unambiguous. Simply continuing to browse, scrolling, or closing the banner is not treated as consent.

Changing or withdrawing your consent.

You can withdraw or change your consent at any time by deleting the relevant cookies in your browser, which prompts our banner to ask for your choice again on your next visit, or by contacting us at [email protected].
Withdrawal takes effect going forward and does not affect processing carried out before you withdrew.
We will in any case ask you to renew your choice at least every 12 months.

If you refuse. The Website remains fully available; only analytics and advertising features are switched off.

Forms. The optional consent for service-quality follow-up on our contact forms is separate and is described in Contact forms. You can withdraw it at any time by contacting [email protected].

Our records. We keep records of the consent you give — including when it was given and what it covered — so that we can demonstrate compliance. We will ask you to renew your choice at least every 12 months, and sooner if this policy or our tools change materially.

Age. By giving consent, you confirm that you meet the minimum age that applies in your country — see Children.

8. Google Analytics & advertising {#google}

In short: We use Google Analytics 4 to understand site usage and Google advertising features for marketing — only after you consent. Google may also use some data for its own purposes.

We use Google Analytics 4 (measurement property G-D9C5HDVLP1), a service provided by Google. With your consent, it helps us understand how visitors find and use the Website.

Google Analytics 4 collects usage data through cookies and similar identifiers (see Cookies). It does not store your IP address; for visitors in the EEA and the UK, approximate location is derived without logging the IP.
We have a data processing agreement in place with Google, under which Google acts as our processor for analytics measurement.

Where our Google advertising features (such as Google Signals, remarketing, and Google Ads) are active and you consent, Google also processes online identifiers to measure and personalize advertising. For these advertising purposes, Google acts as an independent controller and processes data in accordance with its own privacy policy.

Google Privacy Policy — https://policies.google.com/privacy
How Google uses data from sites that use its services — https://policies.google.com/technologies/partner-sites
Opt out of Google Analytics — https://tools.google.com/dlpage/gaoptout
Google Ads Settings — https://adssettings.google.com

For international transfers relating to Google, see International data transfers.

9. Who we share data with {#sharing}

In short: We share data only with the providers that help us run the Website and our analytics/ads — and we never sell it.

We do not sell your personal data. We share it only with:

Google — analytics and advertising (see Google Analytics & advertising).
Our helpdesk provider (based in the EU) — processes the messages you send through our contact forms (see Contact forms), acting as our processor.
Our hosting provider (based in the EU) — stores and serves the Website.
Professional advisers and public authorities — where required by law, or to establish, exercise, or defend legal claims.

Our processors act under contracts that require them to protect your data and to process it only on our instructions.

10. International data transfers {#transfers}

In short: Our hosting and helpdesk keep data in the EU. Google may transfer some data to the US under approved safeguards.

Our hosting provider (in Germany) and helpdesk provider (in the EU) process data within the EU/EEA.
Google may process analytics and advertising data on servers outside the EEA, including in the United States. Where this happens, transfers are protected by appropriate safeguards:
- the EU–US Data Privacy Framework (Google LLC is certified under it);
- the European Commission’s Standard Contractual Clauses (SCCs); and
- for the UK, the UK International Data Transfer Addendum.

You can request more information about these safeguards using the contact in How to contact us.

11. Data retention {#retention}

In short: We keep data only as long as needed — here are the periods.

Data	Retention
Analytics data (Google Analytics 4)	User- and event-level data retained for 14 months; aggregated reports may be kept longer
Advertising data	Per Google’s advertising retention, and only while you consent
Server log data	30 days
Support and Business form data	24 months from resolution of your request, unless a longer period is needed for a legal claim or an ongoing relationship
Optional follow-up consent (e-mail)	Until you withdraw; consent records kept 12 months thereafter
Cookie consent records	12 months

When a retention period ends, we delete or anonymize the data.

12. Your rights {#your-rights}

In short: You can access, correct, delete, or object to the use of your data — just email us.

Under the GDPR and the UK GDPR, you have the right to:

Access — obtain a copy of your personal data.
Rectification — correct inaccurate or incomplete data.
Erasure — have your data deleted (“right to be forgotten”).
Restriction — limit how we use your data.
Portability — receive certain data in a structured, machine-readable format.
Object — object to processing based on legitimate interests, and to direct marketing at any time.
Withdraw consent — where processing is based on consent, at any time (see Consent).
Automated decisions — the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not carry out such decision-making.

To exercise any right, contact [email protected]. We respond within one month, which we may extend by two further months for complex requests (we will tell you if so). Exercising your rights is free, unless a request is manifestly unfounded or excessive.

You also have the right to lodge a complaint with a supervisory authority — our lead authority is the Office of the Commissioner for Personal Data Protection (Cyprus) — or with the authority in your country of residence (for the UK, the ICO — see UK users).

13. UK users {#uk}

In short: If you are in the UK, UK data protection law applies and you can complain to the ICO.

If you access the Website from the United Kingdom, we process your personal data in accordance with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR). Your rights are the same as those described in Your rights.

You may lodge a complaint with the UK Information Commissioner’s Office (ICO) — https://ico.org.uk.

14. US users {#us}

In short: If you are in the US, you may have rights under state laws such as California’s — including to opt out of “sharing” for ads.

This section applies to residents of US states with applicable privacy laws, to the extent those laws apply to us.

California (CCPA/CPRA). To the extent the CCPA/CPRA applies, California residents have the right to know, delete, and correct their personal information, and to opt out of the “sale” or “sharing” of personal information. We do not sell personal information for money. However, the use of Google advertising features may be considered “sharing” for cross-context behavioral advertising under California law.

Do Not Sell or Share My Personal Information: you can opt out by rejecting advertising cookies in our banner (see Consent). We also honor the Global Privacy Control (GPC) browser signal as a valid opt-out.
We do not discriminate against you for exercising your privacy rights.

Other US states. Residents of other US states with privacy laws may have similar rights (to access, delete, correct, and opt out of targeted advertising). To exercise any US privacy right, contact [email protected].

15. Children {#children}

In short: The Website is not meant for children, and we do not knowingly collect their data.

The Website is intended for adults and is not directed to children. We do not knowingly collect personal data from children below the age of digital consent in their country (16 under the GDPR, or a lower age set by national law — for example, 14 in Cyprus).

If you believe a child has provided us with personal data, please contact [email protected] and we will delete it.

16. Security {#security}

In short: We take reasonable measures to protect your data.

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse — including hosting within the EU, encryption in transit (HTTPS), access controls, and working only with providers that offer adequate safeguards. No method of transmission over the internet is completely secure, but we work to protect your data and review our measures regularly.

17. Changes to this policy {#changes}

In short: If we change this policy, we will update the date and, for major changes, tell you.

We may update this Privacy & Cookie Policy from time to time. The current version is indicated by the “Last updated” date at the top. For material changes, we will provide a prominent notice on the Website and, where required, ask for your consent again. Previous versions are available on request.

18. How to contact us {#contact}

In short: Reach our privacy contact by email; you can also contact your data protection authority.

For any question or request about this policy or your personal data:

Dark Project Limited
KIBC office 102, Profiti Ilias 4, 4046 Limassol, Cyprus
Privacy contact: [email protected]

Supervisory authorities:

Cyprus — Office of the Commissioner for Personal Data Protection — http://www.dataprotection.gov.cy
UK — Information Commissioner’s Office (ICO) — https://ico.org.uk
EU/EEA — you may also contact the data protection authority in your country of residence.