Privacy policy

The controller of your data is Marcin Papciak, a sole trader registered in Poland, VAT ID PL6852250399, based in Kraków. In matters concerning your data, write to the e-mail address shown in the contact section of the home page.

• Traffic statistics — only after you accept cookies. Google Analytics 4, loaded through Google Tag Manager, records which pages you view, how you got here (referrer, campaign parameters), approximate location derived from your IP address, browser language, screen size and device type.
• Anonymous signals when you decline — Google's tag still sends a stateless ping with no identifier, which cannot be linked to you or to your other visits.
• Server logs — Firebase Hosting records requests, including IP addresses, to serve the site and protect it from abuse.
• Whatever you write to me — if you send an e-mail or a message, I process what you chose to send in order to reply.

There is no profiling, no automated decision-making, no advertising cookies of my own and no selling of data to anyone.

• Your consent (Art. 6(1)(a) GDPR) — analytics. You may withdraw it at any time, as easily as you gave it, using the button below.
• Legitimate interest (Art. 6(1)(f) GDPR) — keeping the site available and secure, and replying to messages you send me.

• _ga, _ga_* — Google Analytics, set only after you accept. They distinguish visitors and sessions. Google's default retention for these cookies is up to 2 years.
• mpap-consent, mpap-lang — kept in your browser's local storage, never sent to a server. They remember your cookie choice and your language, so you are not asked again. These are strictly necessary for the site to respect your decision and need no consent.

The site runs on Google infrastructure — Firebase Hosting and Google Cloud Storage — and uses Google Analytics, Google Tag Manager and Google Fonts. Loading fonts and media means your IP address reaches Google's servers even before any consent, because that is how a browser fetches a file. Google is certified under the EU–US Data Privacy Framework, which is the basis for transfers outside the European Economic Area.

Analytics data is kept for 14 months in Google Analytics. Correspondence is kept as long as our contact is active and afterwards for as long as the law requires or a claim could arise. Server logs are kept for the period set by Google for Firebase Hosting.

You have the right to access your data, correct it, delete it, restrict its processing, object to processing based on legitimate interest, and receive it in a portable format. Withdrawing consent does not affect processing that happened before. You can also lodge a complaint with the Polish supervisory authority — Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa.

This clears your saved decision and shows the consent banner again.