What we collect, and what we don't.
Three things reach us: what you write in a form, what you send with an application, and — only if you agree — a count of the pages you opened. This page says what happens to each.
Who we are
Umber OÜ, an engineering company at Soo tn 7, 10414 Tallinn, Estonia. We decide what happens to everything described below.
What we collect
What you type into a form. A name, an email address and your message, plus the IP address it was sent from — that last one so a script cannot send us a thousand of them. It reaches us as an email and lives in our mailbox for as long as the conversation is live, and up to two years after; the site itself stores no copy. Nothing here is required of you; write only what you want us to have.
An application, if you send one. Your CV and the details you fill in go to our hiring system, where the people doing the hiring read them. We keep them while the role is open and for up to a year after, in case something better fits, and delete them as soon as you ask.
A count of pages, if you allow it. Google Analytics, with your IP address shortened before it is stored. Decline and none of it runs — no script, no cookie, no difference to the site. These two are the only cookies this site sets:
| Cookie | What it does | Lasts |
|---|---|---|
| _ga | Tells Google Analytics one visitor from another | 2 years |
| _ga_* | Keeps a single visit together across pages | 2 years |
Your answer itself is remembered in the browser's own storage, not in a cookie — a cookie set to record an opinion about cookies would be a poor start.
Handling the above means our email provider, our hiring system, our host and the anti-spam check on the forms — Cloudflare Turnstile, which sees the request but not what you wrote — see it in passing, some of them outside the EU, under the European Commission's standard contractual clauses. Nobody else does, and none of it is sold. The server also keeps a short access log, IP addresses included, for the few days it takes to notice something attacking it.
The grounds, in the law's own words: steps towards a contract when we answer you or consider your application, consent for analytics, and our legitimate interest in keeping the site up and unflooded by scripts.
What you can ask for
A copy of what we hold, a correction, its deletion, a pause on using it, your data in a portable file, or an objection to us holding it at all. Consent, where we rely on it, can be withdrawn at any time — the switch below is one way, and asking is another.
Ask through the contact form and we answer within a month. If that does not satisfy you, the Estonian Data Protection Inspectorate takes complaints. Nothing here is decided about you by a machine: no profiling, no automated decisions.
Analytics
Loading your current choice…
Last updated August 2026. If this changes, the date changes with it.