Privacy Policy
Short and to the point: what data I collect, why, on what legal basis, and what rights you have.
Last updated: 16 June 2026.
1. Data controller
The controller of your personal data is FlowExplain. For any data protection matters, contact: privacy@flowexplain.com.
2. What data I process
- Contact form data — your name, email address, subject and message content, which you provide when you get in touch with me.
- Technical data — basic information recorded automatically by the hosting provider (e.g. IP address, browser type, request time) in server logs, in order to keep the site running and secure.
- Cookie and analytics data — only if you consent to it in the cookie banner (see section 5). Analytics is disabled by default.
3. Purposes and legal bases
- Responding to your message from the contact form — based on my legitimate interest in handling correspondence (Art. 6(1)(f) GDPR).
- Keeping the site running and secure (technical logs) — Art. 6(1)(f) GDPR (legitimate interest).
- Analytics and non-essential cookies — solely on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
4. Recipients and processors
To the extent necessary to run the site, I use external providers that process data on my behalf:
- Vercel — hosting and serving the website.
- Resend — delivering messages sent through the contact form to my email inbox.
- Google (Google Analytics) — website traffic analytics, loaded only after the user grants consent.
5. Cookies and consent
The site uses cookies and similar technologies. Necessary cookies are required for the site to function. The remaining categories — analytics, marketing and preferences — are disabled by default and only activate after you give consent in the cookie banner.
You can change or withdraw your consent at any time using the privacy settings in the cookie banner. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
6. Transfers outside the EEA
Some of the providers listed in section 4 (including Vercel and Google) may process data outside the European Economic Area, including in the USA. In such cases the transfer is based on appropriate safeguards, e.g. Standard Contractual Clauses (SCCs) approved by the European Commission and applied by those providers.
7. Retention
- Contact form correspondence — for as long as needed to handle your enquiry, and then for up to 12 months.
- Technical logs — for the period applied by the hosting provider.
- Cookies — for the lifetime of the given cookie or until you withdraw consent.
8. Your rights
In connection with the processing of your data, you have the right to:
- access your data and obtain a copy of it,
- rectify (correct) your data,
- erase your data,
- restrict processing,
- object to processing based on legitimate interest,
- data portability,
- withdraw consent at any time (where processing is based on consent).
You also have the right to lodge a complaint with the supervisory authority — in Poland this is the President of the Personal Data Protection Office (UODO).
9. Contact
For matters concerning personal data, write to: privacy@flowexplain.com.
10. Changes to this policy
This policy may be updated — for example when the tools used or the applicable law change. The current version is always available on this page, with the last-updated date shown at the top.