Privacy & Cookies Policy
Last updated: 2026-08-19.
This policy covers decapcms.org — the Decap CMS project website, its documentation, and marketing pages. It doesn’t cover Decap Turbo, our optional paid hosting product, which has its own Privacy Policy covering the data collected by that service.
1. Who we are
This website is operated by PM, poslovni mediji d.o.o., a company registered in Slovenia (registration number 2146215000, VAT ID SI27901181), with its registered office at Igriška ulica 5, 1000 Ljubljana, Slovenia (“we”, “us”, “our”). We are the controller for the personal data described in this policy. Decap CMS itself is free, open-source software maintained by contributors from around the world; this policy is about the website, not the software project’s governance.
2. What we collect and why
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Contact form submissions | Name, email address, message content | Responding to inquiries | Legitimate interest (responding to your request) |
| Analytics data (only if you accept cookies) | Pages visited, referrer, approximate location, device/browser type | Understanding how visitors use the site, so we can improve it | Consent |
We don’t require an account to browse this site, and we don’t collect payment information here (that only happens on Decap Turbo, under its own policy).
3. Cookies
We use cookies and similar technologies as follows:
| Name | Provider | Purpose | Duration | Requires consent? |
|---|---|---|---|---|
decap_cookie_consent | This site (stored in your browser’s local storage, not a cookie) | Remembers your cookie choice | Until you clear browser storage | No — strictly necessary |
GTM/GA cookies (e.g. _ga, _ga_*) | Google (via Google Tag Manager) | Analytics — understanding site usage | Up to 2 years | Yes |
Google Tag Manager itself is a tag-loading container, not a tracker — no analytics or advertising tags fire until you accept. If you reject or dismiss the prompt without accepting, only your consent choice is stored, and no analytics cookies are set. You can change your mind at any time by clearing your browser’s local storage for this site and reloading the page, which will show the prompt again.
We don’t use advertising cookies or third-party tracking pixels on this site.
Sub-processors
- Google — Tag Manager and Analytics, only after you consent.
4. International transfers
Where analytics data is processed outside the EU/EEA and UK (for example, by Google), we rely on appropriate safeguards recognized under EU/UK data protection law, such as Standard Contractual Clauses or an applicable adequacy decision.
5. Data retention
Contact form submissions are retained only as long as needed to handle your inquiry. Analytics data, where you’ve consented to it, is retained according to Google Analytics’ default retention settings.
6. Your rights
If you’re in the UK or EEA, or otherwise entitled to these rights under the law of your country of residence, you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data (“right to be forgotten”);
- Restrict or object to certain processing;
- Withdraw consent at any time — for cookies, by clearing your browser’s local storage for this site;
- Complain to your local data protection authority (in Slovenia, the Information Commissioner) if you believe we’ve mishandled your data.
To exercise any of these rights, contact us.
7. Children’s privacy
This site isn’t directed to children, and we don’t knowingly collect personal data from anyone under 16.
8. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top of this page reflects the latest version.
9. Contact
Questions about this policy or a data request? Contact us, or write to us at the registered office address in section 1.