Privacy

Who is responsible

Alex Gurghiș, Chișinău, Moldova. Write to me@alexgurghis.com about anything on this page.

How the site reaches you

The site runs on a server rented from Hetzner Online GmbH in Germany. Every request passes through Cloudflare, which delivers the site, filters attacks, and processes your IP address to do so.

The Production Kit waitlist

If you sign up on /kit, two things are kept: your email address, and a short label for the link you arrived from — for example “linkedin”. The label is read from the utm_source or ref part of that link. No cookie is involved.

• Consent: by double opt-in. Brevo sends you a confirmation email, you are added only after you click the link in it, and Brevo records that confirmation.
• Purpose: The Production Kit emails — the free first chapter, at most one email a week, and the launch offer.
• Legal basis: your consent.
• Where it is kept: with Brevo (Sendinblue SAS, France), which holds the list on my behalf. This site keeps no copy of it.
• How long: until you unsubscribe.

Brevo records whether its emails to you are opened and whether links in them are clicked.

So that one inbox cannot be sent confirmation emails over and over, the server also remembers a one-way hash of each address that signs up — not the address — for 24 hours, in memory only. A second signup with the same address in that time sends nothing.

The contact forms

What you type into a contact form — your name, email address and message, and depending on the form your website address, the project type and a budget range — is sent to me by email through Brevo's SMTP service. It is not stored on this site.

Your IP address, briefly

To stop the forms being flooded, the server counts submissions per IP address. The address is held in the server's memory for up to an hour and then dropped. It is not written to disk.

Analytics

The site's pages load Google Analytics (Google's gtag.js, from www.googletagmanager.com) — every one except the error page shown for an address that does not exist. Before it starts, the site sets Google's consent settings to denied for analytics storage, ad storage, ad user data and ad personalisation. There is no consent banner and nothing on the site changes those settings, so they stay denied.

In that state Google Analytics sets no cookies and stores nothing on your device. Each page view still sends Google one request. Like any request your browser makes, it carries your IP address, browser details and the address of the page, plus a random number that is made up anew on every page load and is not stored, so two page views cannot be linked through it.

• Provided by: Google Ireland Limited.
• Legal basis: legitimate interest — knowing, in aggregate, which pages are read.
• How long: event data is kept for 2 months, the shortest setting Google Analytics offers.

On your device

If you switch between the day and night themes, the choice is saved in your browser's local storage so the next page opens the same way. It is never sent anywhere. The site's own code sets no cookies for visitors.

Your rights

You can ask for a copy of what is held about you, have it corrected or deleted, and withdraw your consent to the waitlist at any time by unsubscribing. Write to me@alexgurghis.com for any of these. You can also complain to a data protection supervisory authority.