Privacy policy.

The only personal data this site actively asks for is what you type into the audit request form: your name, email address, an optional budget range, and your project description.

When you submit the form, that information is stored in our own database, and we get a notification through Telegram that a request came in. No third-party email marketing service is involved, and nobody profiles you. We reply from our own inbox, directly to the address you gave us.

The site also has a chat widget. Anything you type into it, and any image you choose to attach, is sent to our server and stored so we can follow up and understand what visitors ask. Your message is passed to a language model through OpenRouter to generate the reply; if you attach an image, it is also described once by a vision model through the same provider. Neither is used to train models on your data. If you ask the assistant to put you in touch with us, it shows a small form where you leave your name and one contact of your choice - an email address, a Telegram handle or a phone number - which is stored and notified exactly like the audit form.

The widget tells you before you type that you are talking to an AI system and not a person, as the EU AI Act requires. It answers from published material about our own services, it can be wrong, and it makes no automated decision about you: it cannot accept or reject you as a client, quote a price outside our three published offers, or affect you legally in any way. A person reads everything it collects. You can skip it entirely and email us instead.

If you rate the conversation at the end, we store the score and any note you leave with it, for the same 12 months, so we can see where the assistant was unhelpful.

Please don’t paste passwords, API keys, or other people’s personal data into the chat. It is a sales conversation, not a secure channel.

Like any website, our hosting provider may automatically log basic technical data for every visit (IP address, browser type, and request timestamps) for security and reliability. We do not use this data for marketing or profiling.

We also use Vercel Analytics to see how many people visit the site, which pages and sections they reach, and which links or buttons get clicked. This runs on our hosting provider’s own infrastructure and, per Vercel’s documentation, does not use cookies or other persistent identifiers and does not track you across other websites. It reports aggregated, page-level statistics, not a profile tied to you individually.

If you accept the cookie notice, two more things run. PostHog, a product analytics service we use on its European infrastructure, records which pages and elements you open so we can see which parts of the site are useful. And we store a single first-party cookie, dvx_attr, that remembers where your first visit came from: the campaign tag in the link you clicked, or the site that linked to us. It lasts 30 days, holds no name or email, and exists so that when someone contacts us we know which post or link brought them here. Decline and neither runs, and nothing else about the site changes.

• To reply to your audit request and discuss your project (consent, given via the form checkbox).
• To prepare a proposal and deliver work if we agree to a paid engagement (performance of a contract).
• To answer your questions in the chat widget and follow up on what you asked about (legitimate interest in responding to a business enquiry; consent, where you give us your contact details through it).
• To keep our website secure and working correctly (legitimate interest, for the technical hosting logs described above).
• To understand how the site is used and improve it (legitimate interest, for the cookieless analytics described above).
• To measure which pages and campaigns actually bring people to us (consent, for PostHog and the attribution cookie, which run only after you accept and which you can withdraw by clearing this site’s data).

Under GDPR, you can ask us to:

• Show you what data we hold about you.
• Correct anything that is inaccurate.
• Delete your data, where we are not required to keep it.
• Restrict or object to how we use it.
• Send you a copy in a portable format.
• Withdraw consent at any time, without affecting anything already done.

Email [email protected] for any of the above. You can also lodge a complaint with Poland’s data protection authority, the Prezes Urzędu Ochrony Danych Osobowych (UODO).