Privacy Policy
Information about personal data processing in connection with using the tendril.consulting website.
Data Controller
The controller of your personal data is Kacper Dymecki Software, NIP 6692546444, Wenedów 26B/8, 75-847 Koszalin, contact: contact@tendril.consulting.
What Data We Collect
Only data voluntarily provided through the contact form is collected: name, email address, selected service, message. Submissions are stored in a SQLite database on the server. Your IP address is collected for abuse prevention and rate limiting.
Cookies
The website uses only essential technical storage: a browser localStorage entry that remembers your cookie consent choice. If you consent to analytics, the cookieless GoatCounter tool described in the Analytics section is loaded — it sets no cookies whatsoever. We do not use tracking, advertising, or third-party analytics cookies.
Analytics
To understand how visitors use the website, we use GoatCounter — a privacy-friendly, cookieless analytics tool which we self-host on our own server (stats.tendril.consulting). The tool sets no cookies, creates no unique identifiers, and collects no personal data. Your IP address is used only momentarily to count visits and determine your country, and is never stored; likewise, no data from regular visitors' browsers (such as the browser type or User-Agent string) is ever stored. The sole exception: User-Agent strings of automated bot traffic (e.g. search-engine crawlers or spam scrapers) may be retained by the tool for spam and bot filtering. We keep only anonymous, aggregate statistics (such as visit counts per page, country, or browser type) that cannot be linked to any individual. Analytics load only if you consent via the cookie banner; the legal basis is your consent (Article 6(1)(a) GDPR). You can change or withdraw your consent at any time via the cookie settings link in the footer.
Data Recipients / Processors
To provide the services described in this policy, your personal data may be transferred to the following processors, who process it only for the stated purposes and in accordance with the GDPR: Cloudflare Turnstile (challenges.cloudflare.com) — bot and spam protection on the contact form, processing your IP address and browser data for anti-abuse purposes; ntfy (ntfy.cliaux.stream) — sending contact-form submissions to the owner as notifications; cal.com — if you book a discovery call, your booking details are processed by cal.com under its own privacy policy; and the web hosting provider — server hosting for the website, the contact API (SQLite database) and the self-hosted analytics. All processors process data only for the above purposes and in accordance with the GDPR. We do not sell personal data and do not use it for automated decision-making.
Purpose of Processing
Personal data is processed to respond to your contact inquiry. Your consent is required and stored with each submission.
Your Rights
You have the right to: access your data, rectify it, delete it, restrict processing, data portability, object to processing, and lodge a complaint with the supervisory authority (UODO in Poland).
Retention Period
Personal data is retained for 90 days (3 months) from the date of submission, after which it is automatically deleted by a cleanup job. Anonymous, aggregate analytics statistics cannot be linked to any individual and are retained for as long as the website operates. User-Agent strings of automated bot traffic, retained for spam and bot filtering, are likewise stored for as long as the website operates.
Last updated: August 20, 2026