Transparency
Privacy notice
Last updated: 29 August 2026
This notice covers information sent through the contact form and newsletter. The site uses no advertising, profiling or analytics cookies.
Controller and contact
Mateusz Więcek is the data controller. For a privacy request, use the site contact form and put “Privacy” in the subject line.
Information collected
The contact form stores your name, email address, subject, message, selected language, consent confirmation and submission time. The newsletter stores your email address, language, consent wording and version, sign-up source, and consent, confirmation and unsubscribe timestamps. Confirmation tokens are stored only as hashes. The application does not retain raw IP addresses for newsletter purposes.
Purposes and legal bases
Contact-form data is used only to read your message, reply and manage the resulting correspondence. The newsletter is sent only on the basis of separate, freely given consent. Contact details are never added to marketing automatically. Technical hashes are used for abuse prevention and service security.
Newsletter and confirmation
The newsletter form activates only after Turnstile protection and a verified email sender are connected. Consent uses a separate, unticked box. The first request creates only a pending record; opening a link does not activate anything. Subscription becomes active only after the person deliberately presses the confirmation button, and the link expires after 48 hours.
Unsubscribe and objection
Every marketing email will contain a signed unsubscribe link and one-click unsubscribe support. Unsubscribing requires no account, password, Turnstile or re-entry of the address. It is immediate and idempotent. A minimal suppression record remains solely to respect the objection and prevent further email without fresh consent.
Retention
Unconfirmed newsletter records become eligible for deletion after 30 days; cleanup runs when the sign-up service is next used. An active subscription is retained until unsubscribe. Minimal suppression records are excluded from that cleanup and remain for as long as needed to respect the objection. Correspondence is kept through the response and necessary follow-up, then only as long as reasonably needed to document the contact or protect legal claims.
Recipients and providers
Data may be processed by hosting and database providers, Cloudflare Turnstile for anti-bot protection, and Resend for email delivery. Providers receive only the data needed for their role. I do not sell personal data or share it for another party’s marketing.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction or portability, or object to processing. Consent can be withdrawn at any time without affecting earlier processing. You may also complain to the UK ICO or Poland’s UODO.
Settings and technical data
The site stores a functional language setting to remember whether you chose Polish or English. It uses no analytics, profiling or advertising cookies. Once forms are activated, Turnstile may process technical signals needed to identify bots and protect the service.
Official guidance on your rights: ICO — consent · ICO — email marketing · UODO