Privacy Policy

Last updated: 18 October 2026

This policy explains what personal data is processed when you use hollyhack.org, in line with Article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR).

1. Controller

The data controller is Kamil, author of HollyHack. For any question about personal data, contact[email protected].

2. What data is processed

This site is a static blog. It has no user accounts, forms, comments, newsletter, ads or analytics. I do not collect data for marketing and I do not profile readers.

Personal data may be processed in two situations only:

• Server logs. On every visit, the hosting provider's server automatically records technical data: IP address, date and time of the request, the page requested, browser and operating system type, and the referring page. The site is hosted on Cloudflare Pages. This data is used only to deliver the site, keep it secure and prevent abuse.
• Email. If you write to the address above, I process your email address, your message and any other data you include in order to reply.

3. Legal basis

• Server logs: Article 6(1)(f) GDPR, the controller's legitimate interest in providing the site and keeping it secure.
• Email: Article 6(1)(f) GDPR, the legitimate interest in replying to your message.

4. Recipients

Server log data is processed by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), the provider of Cloudflare Pages, acting on my behalf as a processor (Cloudflare privacy policy). Emails are stored by my email provider. I do not sell or share data with anyone else unless required by law.

5. Transfers outside the EEA

Cloudflare may process data outside the European Economic Area, including in the USA. Cloudflare participates in the EU-US Data Privacy Framework, and transfers are based on the European Commission's adequacy decision and on standard contractual clauses. If the email provider processes data outside the EEA, the same safeguards apply.

6. Retention

• Server logs: for the period set by Cloudflare in its data retention rules.
• Email: for as long as needed to reply and continue the conversation.

7. Your rights

You have the right to:

• access your data and receive a copy (Article 15 GDPR),
• have it corrected (Article 16 GDPR),
• have it erased (Article 17 GDPR),
• restrict processing (Article 18 GDPR),
• object to processing based on legitimate interest (Article 21 GDPR).

To exercise these rights, write to [email protected]. You can also lodge a complaint with a supervisory authority, in Poland the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw (uodo.gov.pl), or the authority in your own EU country.

8. Voluntary data and profiling

Providing data by email is voluntary, but I cannot reply without your email address. Data is not used for automated decision-making or profiling.

9. Cookies and browser storage

This site does not use cookies. It only stores your settings in your browser. See thecookie notice for details.

10. External links

Posts may link to other websites. Their own privacy policies apply once you leave this site.

11. Changes

This policy may be updated, for example after a change of hosting or when new features are added. The current version is always on this page, with the date of the last change at the top.