Privacy Policy

This site is operated by Mihu Rocks (Michał Będkowski, Wrocław, Poland). We are the controller of the personal data described in this policy. For any privacy-related question please use the contact form on the About page — we do not publish a direct email address to keep our inbox free of automated scraping.

We only collect data you actively give us through the contact form on this website (the “wizard”):

• Your name and email address (required to reply).
• Optional company name and a free-text message.
• The selections you make in the wizard (need, focus, timeline, budget) so we can prepare a relevant response.

Separately, if you accept analytics cookies, Google Analytics 4 may process pseudonymous usage data (page views, approximate location derived from IP, device/browser signals). We do not run advertising pixels or behavioural advertising profiles. Server logs may record technical data such as IP address, user-agent, and request timing for security and abuse prevention.

• Replying to your inquiry — GDPR Art. 6(1)(b) (steps prior to entering a contract) and Art. 6(1)(f) (our legitimate interest in answering messages sent to us).
• Spam protection via reCAPTCHA — Art. 6(1)(f), our legitimate interest in keeping the site functional and free from automated abuse.
• Optional analytics (Google Analytics 4) — Art. 6(1)(a), your consent via the cookie banner. Analytics storage stays denied until you choose “Accept analytics”.
• Security and request logs — Art. 6(1)(f), our legitimate interest in protecting our infrastructure.

The contact form is protected by Google reCAPTCHA v3. When you load a page with the form or interact with it, your browser communicates with Google and Google may collect device, browser, and behavioural signals (including IP address) to score whether you are a human or a bot. This processing happens on Google infrastructure, including in the United States, under standard contractual clauses. Use of reCAPTCHA is subject to Google’s Privacy Policy and Terms.

We use a first-party consent preference (stored locally) so we remember your cookie choice. Google Analytics 4 cookies / measurement load only after you accept analytics. The reCAPTCHA script may set technical cookies to perform anti-abuse scoring, as described by Google in the link above. Blocking third-party cookies may prevent the contact form from submitting.

Inquiries are read by Mihu Rocks (the founder). We do not sell or rent personal data. The limited categories of recipients are:

• Hosting and email providers we use to operate the website and reply to you, acting as processors under data processing agreements.
• Google Ireland / Google LLC for reCAPTCHA scoring and, only after consent, Google Analytics 4 measurement.
• Authorities when we are required to disclose data by law.

Inquiry messages are retained for as long as needed to handle your request and any follow-up cooperation, and afterwards for a reasonable period (typically up to 24 months) to be able to answer further correspondence on the same topic. Server access logs are kept for short technical retention windows. You can ask us to erase your data earlier — see your rights below.

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (rectification);
• have your data erased when there is no overriding reason to keep it;
• restrict or object to processing based on legitimate interest;
• receive your data in a portable format;
• lodge a complaint with the supervisory authority — in Poland this is UODO.

To exercise any of these rights submit a request through the contact form and we will respond within 30 days.

We use HTTPS, modern reverse proxies, and reasonable access controls. Submitted data lives behind authentication on the operator’s infrastructure. No system is perfect — please avoid sending us highly sensitive information through the public form.

When we materially change how we process personal data we update this page and refresh the “Last updated” date at the top. Substantial changes affecting an open inquiry will be communicated to you directly.