1. Data controller
The controller of the personal data processed through this site is Ivan Rudnitski, who runs CoreIdeas. Contact: hello@coreideas.net
2. What we collect and why
- Newsletter — if you subscribe: your email address, the language of the page and the form you subscribed with, and when. To send you new articles; no mailing has been sent yet. Basis: your consent (GDPR Art. 6(1)(a)).
- Push notifications — if you turn them on: the address your browser's push service issues and the keys to encrypt messages to it; nothing that names you. To announce new articles. Basis: your consent.
- Server logs — with every request: your IP address, the time, the page, the referring page and your browser's user agent. To keep the site working and secure; forms and search are also limited per IP address, counted for a minute at a time. Basis: legitimate interest (Art. 6(1)(f)).
- Analytics — we use Umami Cloud (EU region) to measure page views and selected clicks. Umami uses no cookies, does not store IP addresses and does not build identifiable profiles. We use aggregate reports; Umami may group anonymous activity into sessions. Basis: legitimate interest (Art. 6(1)(f)). Umami's privacy policy.
- Cookies — only two, both strictly necessary, so the site does not ask for consent: a session cookie, and XSRF-TOKEN, which protects forms. Both expire two hours after your last visit. The session record on our server holds your IP address and user agent. Basis: legitimate interest.
- Only in your browser — your theme choice, which you set and which is kept only so the site remembers it, and pages saved for offline reading. They never reach us.
3. What we don't do
No advertising, no tracking pixels, no other third-party scripts or fonts. The only analytics is the cookieless kind described above. If that changes, this policy changes first.
4. Who else processes data
- Hetzner Online GmbH (Germany) hosts the site and its database.
- Umami Software, Inc. (Umami Cloud, EU region) provides the visit statistics described above.
- Your browser's push service (Google, Mozilla, Apple or Microsoft, depending on the browser) delivers notifications, possibly from outside the EU.
- ImprovMX forwards email sent to our addresses to our mailbox at Google (Gmail).
5. How long we keep it
- Newsletter — until you unsubscribe. The address then stays marked as unsubscribed, so that we never write to it again, and is deleted on request.
- Push subscriptions — deleted when you turn notifications off or the push service reports them expired.
- Server logs — 14 days. Sessions — expire two hours after your last request.
6. Your rights
You may ask for access to your data, its correction or deletion, a restriction of its processing or a copy of it; you may object to processing and withdraw consent at any time. You may also complain to a data protection authority — in Poland, the President of the Personal Data Protection Office (UODO).
To exercise your rights, write to hello@coreideas.net. We reply within one month.
7. Changes
The date at the top shows the last revision. A significant change will be announced on the site.
8. Contact
Privacy questions and requests: hello@coreideas.net or the contact page.