Privacy Policy

This site is operated by Mihu Rocks (Michał Będkowski, Wrocław, Poland). We are the controller of the personal data described in this policy. For any privacy-related question please use the contact form on the About page — we do not publish a direct email address to keep our inbox free of automated scraping.

We only collect data you actively give us through the contact form on this website (the “wizard”):

• Your name and email address (required to reply).
• Optional company name and a free-text message.
• The selections you make in the wizard (need, focus, timeline, budget) so we can prepare a relevant response.

We do not run analytics, tracking pixels, ad networks, or behavioural profiling on this site. Server logs may record technical data such as IP address, user-agent, and request timing for security and abuse prevention.

• Replying to your inquiry — GDPR Art. 6(1)(b) (steps prior to entering a contract) and Art. 6(1)(f) (our legitimate interest in answering messages sent to us).
• Spam protection via reCAPTCHA — Art. 6(1)(f), our legitimate interest in keeping the site functional and free from automated abuse.
• Security and request logs — Art. 6(1)(f), our legitimate interest in protecting our infrastructure.

The contact form is protected by Google reCAPTCHA v3. When you load a page with the form or interact with it, your browser communicates with Google and Google may collect device, browser, and behavioural signals (including IP address) to score whether you are a human or a bot. This processing happens on Google infrastructure, including in the United States, under standard contractual clauses. Use of reCAPTCHA is subject to Google’s Privacy Policy and Terms.

The site itself does not set advertising or analytics cookies. The reCAPTCHA script may set technical cookies in your browser strictly to perform its anti-abuse scoring, as described by Google in the link above. You can block third-party cookies in your browser settings, with the trade-off that the contact form will refuse to submit.

Inquiries are read by Mihu Rocks (the founder). We do not sell or rent personal data. The limited categories of recipients are:

• Hosting and email providers we use to operate the website and reply to you, acting as processors under data processing agreements.
• Google Ireland / Google LLC for reCAPTCHA scoring (described above).
• Authorities when we are required to disclose data by law.

Inquiry messages are retained for as long as needed to handle your request and any follow-up cooperation, and afterwards for a reasonable period (typically up to 24 months) to be able to answer further correspondence on the same topic. Server access logs are kept for short technical retention windows. You can ask us to erase your data earlier — see your rights below.

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (rectification);
• have your data erased when there is no overriding reason to keep it;
• restrict or object to processing based on legitimate interest;
• receive your data in a portable format;
• lodge a complaint with the supervisory authority — in Poland this is UODO.

To exercise any of these rights submit a request through the contact form and we will respond within 30 days.

We use HTTPS, modern reverse proxies, and reasonable access controls. Submitted data lives behind authentication on the operator’s infrastructure. No system is perfect — please avoid sending us highly sensitive information through the public form.

When we materially change how we process personal data we update this page and refresh the “Last updated” date at the top. Substantial changes affecting an open inquiry will be communicated to you directly.