Summary
Mediovsky is a small independent publication, and we do not sell your data. We use Google Analytics for aggregate website statistics and Google Ads remarketing for advertising audiences, but both are off by default under Google Consent Mode and run only if you allow the matching category in the cookie banner. Until then, no analytics or advertising cookies are set. Fonts and images are served from our own domain. We collect only the minimum personal data needed to operate the site and to reply when you write to us.
The short version: when you email us we receive your message; your browser stores a couple of preferences locally on your own device; our hosting provider keeps standard server logs; and Google Analytics and Google Ads remarketing run only after you consent, each tied to its own category. You can change or withdraw your cookie choice anytime via the button in the corner of every page.
Data controller
The controller of personal data for Mediovsky is:
Mediovsky
Operated by Mikołaj Salecki
Warsaw, Poland
Contact: [email protected]
What we collect
| Category | Data | Source |
|---|---|---|
| Messages to us | Your name, email address, and the content of your message | Submitted through the contact form, which posts to our backend (api.mediovsky.com) and delivers your message to us by email via Resend. See "Processors." |
| Reading list | Saved article slugs | Stored locally in your browser (localStorage). Never leaves your device. |
| Theme & notifications | Light/dark choice, which notifications you have read | Stored locally in your browser. Never leaves your device. |
| Newsletter | The email you type into the sign-up form | Submitted through the sign-up form to Resend (our email provider) with double opt-in. We store your email to send the newsletter until you unsubscribe. See "Processors." |
| Server logs | IP address, user agent, request URL, status code, timestamp | Standard web-server logs kept by our hosting provider for security and operations. |
| Analytics | Aggregate usage statistics; advertising audiences | Google Analytics 4 (Statistics) and Google Ads remarketing (Marketing), consent-gated and denied by default. See "Processors" and "Cookies." |
Why we use it
- Messages: to read and reply to what you send us.
- Local storage: to remember your theme, your reading list, and which notifications you have seen. This data stays on your device.
- Server logs: to operate and secure the site and debug errors.
Legal basis (General Data Protection Regulation, GDPR)
- Consent (Art. 6(1)(a)): writing to us (you choose to send the message); subscribing to the newsletter (double opt-in); and Google Analytics, which runs only after you allow the Statistics category in the cookie banner.
- Legitimate interest (Art. 6(1)(f)): server security logs and basic site operation. Our interest is running an independent publication; we have weighed this against your rights and consider the impact minimal.
Processors we use
We share the minimum necessary data with the following processors, each under a data processing agreement (DPA).
| Processor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Website and email-backend hosting & server logs | Germany (EU) |
| Resend (Resend, Inc.) | Sending transactional and newsletter email (subscription confirmations, the newsletter, and handling of your inquiry). Stores your email address on our behalf while you are subscribed. | Ireland (EU) data region; provider US-incorporated, SCCs |
| Cloudflare, Inc. | Content-delivery/DNS proxy for the website, and email routing (forwarding messages sent to our addresses to our inbox). | Global edge; provider US, SCCs |
| Google (Google Ireland Ltd / Google LLC) | Google Analytics 4 (aggregate website statistics, under the Statistics category) and Google Ads remarketing (advertising audiences and campaign measurement, under the Marketing category). Both run under Google Consent Mode and only after you consent. Sets Google cookies (e.g. _ga for analytics; _gcl_au and DoubleClick IDE for remarketing). | EU + US; SCCs |
Analytics and advertising are consent-gated. We use Google Analytics 4 and Google Ads remarketing, both under Google Consent Mode v2, with analytics_storage and ad_storage denied by default. On a fresh visit Google sets no cookies and collects nothing. Analytics runs only if you allow the Statistics category; Google Ads remarketing runs only if you allow the Marketing category. You can change or withdraw either choice anytime via the button in the corner of every page. Because Google is US-incorporated, the transfers are covered by Standard Contractual Clauses (SCCs). A Google AdSense account tag is present on the site solely so Google can review it; it serves no ads at this time. If advertising is enabled in future, it will run under the Marketing category and Google Consent Mode, and we will update this policy first.
Retention
| Data | Retention |
|---|---|
| Emails you send us | 12 months from our last reply, unless an ongoing matter requires longer |
| Newsletter subscription (your email address) | Until you unsubscribe (one click in every issue), then removed |
| Google Analytics (only after you consent) | 14 months for event and user data; user data resets on new activity |
| Server logs | Per our hosting provider's standard log rotation (short-term, for security/operations) |
| Browser local storage | Until you clear it in your browser |
Your rights under GDPR
You have the right to:
- Access: request a copy of personal data we hold about you.
- Rectification: correct inaccurate data.
- Erasure: ask us to delete your data ("right to be forgotten").
- Restriction: limit how we process your data.
- Portability: receive your data in a portable format.
- Object: object to processing based on legitimate interest.
- Withdraw consent: at any time, with no impact on prior processing.
- Complain: to your local supervisory authority (in Poland: UODO).
To exercise any of these rights, email [email protected]. We respond within 30 days.
Cookies & local storage
The site sets no cookies. It stores a few small values in your browser's localStorage, all of which stay on your device only:
mediovsky-theme: your light/dark preferencemediovsky-saved: your reading listmediovsky-bell-read: which notifications you have already seen
You can clear these at any time via your browser settings without affecting site functionality. Google Analytics and Google Ads remarketing set cookies (see "Processors") only after you consent to the matching category in the banner, and you can withdraw that consent anytime, which stops them and clears the declared cookies.
International data transfers
Website hosting and server logs stay within the European Union (Hetzner, Germany), and our email provider Resend processes in an Ireland (EU) data region. Two of our processors are US-incorporated: Cloudflare (content-delivery/DNS proxy and email routing) and Resend (email delivery). Where their processing may involve access from the United States, we rely on the European Commission's Standard Contractual Clauses (SCCs) as the transfer safeguard. Google is a third US-incorporated processor, consent-gated: only after you allow Statistics (Google Analytics) or Marketing (Google Ads remarketing) does Google (US) receive the corresponding data, transferred under SCCs. Nothing leaves your browser for Google until then.
Minors
Mediovsky is written for marketing and tech business professionals. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us with data, contact [email protected] and we will delete it promptly.
Changes to this policy
We post material changes here with a new "Last updated" date and a note describing what changed. Non-material clarifications may be made without notice. For active newsletter subscribers, we email a summary of any material change.
Contact
Questions about privacy or your data: [email protected]. General contact: contact page.