Privacy policy

The controller of your personal data is Mateusz Ropiak, trading as MRAnalytics. For anything about your data, write to mat@mranalytics.me.

The contact form sends me your name, email address and message, plus your company, phone number and topic if you add them. I use them only to reply to you and to talk about working together.

Legal basis: steps you ask for before a possible contract (GDPR art. 6(1)(b)) and my legitimate interest in answering messages (art. 6(1)(f)). Giving the data is voluntary, but without an email address I can't reply.

The message is delivered to my inbox by Mailgun (Mailgun Technologies, Inc., part of Sinch), a US email provider. The transfer outside the EU is covered by Mailgun's data processing agreement, which includes the EU Standard Contractual Clauses.

I keep messages for up to 12 months after our last contact. If we start working together, I keep what the contract and Polish accounting and tax rules require.

To stop spam, the server remembers the IP address of each message sent through the form for 10 minutes, in memory only. The server that hosts the site also keeps standard access logs (IP address, browser, page and time) to keep it secure; they are deleted automatically after 14 days. Legal basis: my legitimate interest in a secure site (art. 6(1)(f)).

If you click "That's fine" in the banner, the site loads Google Analytics (Google Ireland Limited) to count visits and see how people find the site. It sets the _ga cookies, which last up to 2 years. Google keeps the analytics data for the retention period set in my account, 14 months at most, and may process it in the US.

With the same consent, the site also loads the Google Ads tag (Google Ireland Limited), which tells Google when someone who clicked one of my Google ads visits the site, so I can see whether the ads work. It sets the _gcl_au cookie, which lasts 90 days. Your data is not used to personalise ads for you.

The site also loads the OpenAI pixel (OpenAI), which tells OpenAI which pages you visit here so I can measure whether my ads on ChatGPT bring visitors. It sets the __oppref cookie (30 days) and the __obref cookie (1 year) and sends your IP address and browser details to OpenAI, which may process them in the US.

If you've agreed and then send a message through the contact form, Google and OpenAI are told that a message was sent, together with your email address hashed in your browser (turned into an irreversible code), so they can match it to an ad you clicked. The address itself is never sent to them.

Legal basis: your consent (art. 6(1)(a)). You can withdraw it at any time with the button below; that doesn't affect anything done before. More in Google's privacy policy (policies.google.com/privacy) and OpenAI's (openai.com/policies/privacy-policy).

The live report is served by Microsoft Power BI and only loads when you click "Load the live report". Then your browser connects to Microsoft, which sees your IP address and sets its own cookies: session cookies and Application Insights cookies (ai_user, ai_session) that Microsoft uses to monitor its service. Microsoft decides how it uses this data; see privacy.microsoft.com.

Your analytics choice is saved in your browser's local storage so the banner doesn't come back on every visit. Your answers in "Find your fix" are kept in session storage so they survive a language switch, and disappear when you close the tab. Neither is sent to me.

You can ask me for access to your data, a copy of it, correction, deletion or restriction, and you can object to processing based on legitimate interest. Write to mat@mranalytics.me. No decisions about you are made automatically.

You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa (uodo.gov.pl).