Privacy
This site collects as little data as possible. It has no ads, no third-party tracking code and no Facebook buttons that track you. Below is exactly what is stored, why, and for how long.
Controller: Ondřej Dobečka, contact: andrews911@gmail.com. Send requests for access to or deletion of your data to this address.
What is stored
| When | What is stored | Why, and on what legal basis | How long |
|---|---|---|---|
| You only read | Nothing that identifies you. Traffic measurement counts daily totals only: how many people opened an article, used the mini app, reached a result, how far they read, how long they read (in bands such as at least a minute) and clicked share, where they came from (only a group such as Facebook or Google, not the full address) and whether on a phone or a computer. No cookies and no IP addresses. So that a reload isn't counted twice, your browser remembers what it has already sent until you close the tab (sessionStorage); this never reaches the server. | To learn which articles work. Legitimate interest (Art. 6(1)(f) GDPR) | Totals kept indefinitely |
| You try a mini app | Nothing. What you enter (age, pay, numbers of people…) is calculated only in your browser and isn't sent anywhere. If you share your result as a link, the link contains only non-sensitive numbers from the result (never your age, pay in crowns or the number of people around you). The exceptions are the AI comment in the Draw your people game and the Save result button, see the next rows. | – | – |
| You reach the result of the Draw your people game | The figures' expressions and your guesses (no names and no other appearance) are sent to the server and from there to Google Cloud Vertex AI in the EU, which writes a short comment under the result. None of it is stored; until a restart the server only remembers finished comments by the combination of expressions and guesses, so the same combination isn't sent again. | So the result gets a short comment. Legitimate interest (Art. 6(1)(f) GDPR); without names nobody can be recognised from it | Not stored |
| You click Save result below a mini app | A short result code (only non-sensitive numbers, the same as in the share link), the article, language and time. A blog_did cookie with a random number (valid 1 year); only its encrypted fingerprint goes to the database, not your IP address or email. | So you can see how your result changes, and for an anonymous readers' summary (counts, from 20 results). Your consent (Art. 6(1)(a) GDPR), given by clicking; you withdraw it by deleting on the Your results page | Until you delete it on the Your results page, at most 2 years |
| You like or comment | Cookie blog_did with a random number (valid 1 year). Only its encrypted fingerprint goes to the database, not your IP address or e-mail. | So you can undo a like and so spam can be limited. The cookie is strictly necessary for a function you trigger yourself, so you are not asked beforehand | Like: until you undo it or the article is taken down |
| You comment | Nickname, comment text, language, time | Discussion under the article. Legitimate interest | Published comment: while the article is online, or until you ask for deletion. Rejected comment: 30 days |
| You subscribe | E-mail, language, time of sign-up and confirmation | Sending notices about new articles. Your consent (Art. 6(1)(a) GDPR), confirmed by clicking a link in an e-mail | Until you unsubscribe. Unconfirmed addresses are deleted after 30 days; undeliverable addresses immediately |
Comments are public. Do not write anything you do not want on the internet, especially not details about your health.
Your IP address is held briefly in server memory when you submit a form or a page is measured (flood protection, at most one hour) and is never stored.
Who else handles the data
| Service | Purpose | Where the data is |
|---|---|---|
| Supabase | Database (likes, comments, subscribers, saved results, measurement totals) | Frankfurt, Germany |
| Resend | Sending e-mails | Sent from Ireland; company based in the USA, transfers under its EU-US Data Privacy Framework certification |
| netcup GmbH (server hosting) | Server running the site | Germany |
I do not sell or pass your data to anyone else.
Your rights
You have the right to know what data I hold about you, to have it corrected or deleted, to restrict processing, to object, and to withdraw consent to the newsletter (link in every e-mail). Just write to andrews911@gmail.com. If I do not comply, you can complain to the Czech data protection authority (uoou.gov.cz) or the authority in your country.
Valid from: DOPLNIT