Privacy & Cookies
What happens to your data when you visit 123done.lt or get in touch with DONE.
Updated 5 October 2026
Who is responsible
DONE is operated by Deividas Leilionas, carrying out individual activity under certificate No. 1527530 in Lithuania. He is the controller of the personal data described here. For privacy questions or requests, email hello@123done.lt.
Visiting the website
Our hosting provider, Vercel, processes technical request data such as IP addresses, requested URLs, timestamps and browser information to deliver and protect the website. This is based on our legitimate interest in operating a secure, reliable website (GDPR Article 6(1)(f)). Technical records are kept for operational troubleshooting and security purposes, with retention determined by the relevant hosting log service and any incident that needs investigation.
Contacting DONE
The Write by email option in the contact panel prepares an email draft; that option does not submit your message to a website backend. Text entered in that panel stays in the current page until you choose an email option. If you open Gmail, the draft is passed to Google; if you choose your mail app, it is passed to that app. You decide whether to send it.
When you email us, we process your email address, name and the details you provide to answer and discuss your project. The basis is taking steps at your request before a contract (Article 6(1)(b)), or our legitimate interest in answering other business correspondence (Article 6(1)(f)). Providing this information is voluntary, but we need a way to reply. Please avoid sending sensitive personal information unnecessarily.
Correspondence is handled through Hostinger email and Google Gmail. We retain it while the enquiry or business relationship is active, and afterwards only where needed for follow-up, legal record-keeping or establishing, exercising or defending legal claims. Retention depends on the type of correspondence and applicable statutory obligations or limitation periods.
Jessica AI assistant
Jessica is an AI assistant that helps explore your business needs. When you send a chat message, your conversation (including any contact details you type in chat) is processed by our Vercel-hosted service and OpenAI to generate replies and a lead summary. Do not enter passwords or sensitive personal information. The conversation is kept in the current page memory, not browser storage; refreshing clears it. Session verification tokens expire after two hours.
When you provide your email in response to Jessica’s disclosed request for DONE to contact you, or explicitly ask her to pass your enquiry to DONE, we send your contact details, AI-generated summary and conversation to hello@123done.lt through Resend. An email address or phone number is required for a reply; your name is optional. We use this information to discuss the project at your request before a contract (Article 6(1)(b)). AI summaries may contain errors and are reviewed against the conversation. Email enquiries follow the correspondence retention described above. Closing the panel alone does not submit an enquiry. Provider processing and retention are subject to the configured API account settings and applicable service terms.
Optional website analytics
Google Analytics 4 uses Advanced Consent Mode on our English and Lithuanian landing pages. Before a choice and after Reject, the Google tag sends limited cookieless measurement signals, including consent state and page/technical information. These support aggregate measurement and, where eligible, modelling; they do not give us an individual browsing history for visitors who decline. Accept allows analytics cookies and fuller visit, device and approximate-location measurement. The legal basis for analytics cookies is your consent (Article 6(1)(a)).
We do not enable advertising features, Google Signals or automatic form tracking. Our page-view implementation excludes URL query strings and fragments and reduces the referring URL to its origin. We do not send the contact panel’s text or email addresses to Analytics. Google receives technical network information when its service is contacted.
User- and event-level Analytics data is subject to the property’s retention settings, with a maximum of 14 months for this standard GA4 property. Aggregated reports may be retained longer. Cookie lifetime is separate from server-side data retention. Search Console supplies search-performance reports; it does not add a visitor tracking script to this website.
Cookies and local storage
The following storage is used by our implementation. Analytics cookies are optional; the local preference only remembers your decision. Rejecting analytics does not prevent you from using the website.
- done.analytics-consent.v1
- Local storage · DONE
Remembers Accept/Reject and the decision date. Valid for 180 days; may remain in browser storage until replaced or cleared. - _ga
- Cookie · Google Analytics
Distinguishes browsers for analytics. Only after consent. Up to 180 days from setting/renewal. - _ga_CSVPPJ4WF0
- Cookie · Google Analytics
Maintains Analytics session state. Only after consent. Up to 180 days from setting/renewal.
Your choice
You can accept or reject analytics in the banner and reopen the choice using the footer’s Analytics cookies control or the button on this page. Rejection disables analytics cookie storage and removes the GA cookies our site can access. Limited cookieless Google measurement signals continue. Withdrawal does not affect the lawfulness of processing before withdrawal or automatically erase data already received by Google.
Your consent preference expires after 180 days. Clearing browser storage may make the banner appear again. The preference is specific to this browser/device.
Providers and international processing
Vercel hosts the website, Google provides Analytics, Search Console and Gmail, Hostinger provides our business email, OpenAI processes assistant messages and Resend delivers assistant enquiries. These providers may process information outside the European Economic Area. Their applicable data-processing terms describe transfer safeguards, including Standard Contractual Clauses and adequacy mechanisms where applicable. Contact us for information about the safeguards relevant to your data. We do not sell your personal data.
Your rights
Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your personal data; object to processing based on legitimate interests; and withdraw analytics consent at any time. Email hello@123done.lt. We may need proportionate information to confirm your identity. We normally respond within one month; the GDPR permits extensions in certain cases.
You can complain to Lithuania’s State Data Protection Inspectorate (VDAI), or the supervisory authority in the EU/EEA country where you live, work or believe an infringement occurred. We do not make decisions about you with legal or similarly significant effects solely by automated processing.
Other websites and updates
Portfolio and social links take you to other websites, whose own privacy notices apply. This notice covers DONE’s website and related enquiries, not the client platforms we build. We update this page when our processing changes; the date above identifies this version.