Privacy Policy
Last updated: March 9, 2026
Mantas Digital, MB (“we”, “our”, or “the Company”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and process your information when you visit our websites: md.lt, mantasdigital.com, audityourstore.com, cybervisionaries.com, and wou.ai.
1. Data Controller
Mantas Digital, MB
Company code: 305700237
VAT code: LT100015735113
Address: V. Nagevičiaus g. 3, Vilnius, Lithuania
Email: hi@mantasdigital.com
2. What Personal Data We Collect
Depending on your interaction with our websites, we may collect the following data:
Data you provide directly:
- First and last name
- Email address
- Phone number
- Physical address (street, city, region, postal code)
- Message and inquiry content (via contact forms)
- Newsletter subscription preference
Data collected automatically (only after your consent):
- IP address
- Browser type and version
- Operating system and device type
- Page views and browsing behavior
- Session recordings, heatmaps, and mouse movements (Hotjar)
- Conversion events (form submissions)
- Cookies and similar identifiers
Technical data collected without separate consent (legitimate interest):
- Anti-spam protection data: hidden form field interactions, submission timing, IP address, and browser type – solely for spam and bot prevention (Honeypot Guard)
- Security events: login attempts, blocked IP addresses, security incidents (Wordfence)
3. Purposes and Legal Bases for Processing
| Purpose | Legal Basis (GDPR) |
|---|---|
| Responding to your inquiries via contact forms | Consent (Art. 6(1)(a)) / Contract performance (Art. 6(1)(b)) |
| Website usage analysis (Google Analytics 4) | Consent (Art. 6(1)(a)) |
| User behavior research and website improvement (Hotjar) | Consent (Art. 6(1)(a)) |
| Advertising effectiveness measurement (Meta Pixel, Google Ads) | Consent (Art. 6(1)(a)) |
| Sending newsletters | Consent (Art. 6(1)(a)) |
| Spam and bot protection (Honeypot Guard) | Legitimate interest (Art. 6(1)(f)) |
| Website security and protection (Wordfence) | Legitimate interest (Art. 6(1)(f)) |
| Ensuring website functionality (necessary cookies) | Legitimate interest (Art. 6(1)(f)) |
4. Cookies and Tracking Technologies
Our website uses cookies – small text files stored on your device. When you first visit our website, a cookie consent banner is displayed. Analytics, marketing, and experience cookies and tracking scripts are blocked until you provide your consent. Without your consent, only necessary cookies and anti-spam protection (Honeypot Guard) on contact pages are active.
You can review or change your cookie settings at any time by clicking cookie settings.
Cookie Table
| Cookie | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| cookies_and_content_security_policy | md.lt | Stores your cookie consent preferences | Necessary | 1 year |
| wordpress_sec_*, wordpress_logged_in_* | md.lt | WordPress login session management (logged-in users only) | Necessary | Session / 2 weeks |
| wp-settings-* | md.lt | WordPress user preferences (logged-in users only) | Necessary | 1 year |
| _ga, _ga_* | Google Analytics 4 – visitor identification for statistics | Statistics | 2 years | |
| _gid | Google Analytics 4 – session identification | Statistics | 24 hours | |
| _hjSessionUser_*, _hjSession_* | Hotjar | Session recording, heatmaps, and user behavior analysis | Statistics | 1 year / 30 min |
| _hjid | Hotjar | Unique visitor identification | Statistics | 1 year |
| _fbp | Meta | Facebook Pixel – advertising effectiveness measurement | Marketing | 3 months |
| _gcl_* | Google Ads – conversion tracking | Marketing | 90 days |
Contact Form Conversion Tracking
When you submit a contact form on our website and have consented to marketing and statistics cookies via the cookie banner, conversion events are triggered to measure the effectiveness of our advertising campaigns:
- A “Lead” event is sent to Meta (Facebook) Pixel for advertising effectiveness measurement
- A conversion event with enhanced conversion data (hashed email, phone number, name, address) is sent to Google Ads for advertising optimization
These events only fire when you have given your consent through the cookie settings. The data is used solely for conversion measurement and advertising campaign optimization.
5. Third-Party Service Providers
We may share your data with the following trusted service providers who help us deliver our services:
| Provider | Purpose | Data Location |
|---|---|---|
| Google LLC (Analytics 4, Tag Manager, Ads) | Website traffic analysis, advertising conversion measurement | EU / US (Standard Contractual Clauses) |
| Hotjar Ltd | Session recording, heatmaps, behavior analysis | EU (Ireland) |
| Meta Platforms Inc. (Facebook Pixel) | Advertising effectiveness measurement, conversion tracking | EU / US (Standard Contractual Clauses) |
| Defiant Inc. (Wordfence) | Website security, attack protection | US (Standard Contractual Clauses) |
| Cloudflare, Inc. / jsDelivr | Content Delivery Network (CDN) – speed optimization | Global (Standard Contractual Clauses) |
| Google LLC (Google Fonts) | Font loading for website design | EU / US |
6. International Data Transfers
Some of our service providers operate outside the European Economic Area (EEA), particularly in the United States. In such cases, we ensure the protection of your data by using European Commission-approved Standard Contractual Clauses (SCCs) pursuant to GDPR Article 46(2)(c) or by relying on adequacy decisions under GDPR Article 45.
7. Data Retention Periods
- Contact form data: stored for up to 2 years from submission or until the inquiry is fulfilled
- Analytics data (Google Analytics): 14 months (per Google default settings)
- Hotjar session data: 365 days
- Advertising data (Meta, Google Ads): per the respective platform’s retention policy
- Security logs (Wordfence): up to 90 days
- Cookie consent preference: 1 year
8. Your Rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access – obtain information about whether and what personal data is being processed (Art. 15)
- Right to rectification – request correction of inaccurate or completion of incomplete data (Art. 16)
- Right to erasure (“right to be forgotten”) – request deletion of your data when it is no longer necessary (Art. 17)
- Right to restriction of processing – request restriction of your data processing (Art. 18)
- Right to data portability – receive your data in a structured format and transfer it to another controller (Art. 20)
- Right to object – object to data processing based on legitimate interest (Art. 21)
- Right to withdraw consent – withdraw your consent at any time if data processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal
To exercise your rights, contact us by email: hi@mantasdigital.com
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (VDAI):
- Website: vdai.lrv.lt
- Email: ada@ada.lt
- Address: L. Sapiegos g. 17, 10312 Vilnius, Lithuania
9. Children’s Data
Our websites and services are not intended for individuals under the age of 16. We do not knowingly collect personal data from minors.
10. Changes to This Privacy Policy
We may update this privacy policy from time to time. The updated version will be published on this page with a new date. We recommend periodically reviewing this policy.
11. Contact Us
If you have questions about this privacy policy or the processing of your personal data, contact us:
Email: hi@mantasdigital.com
