Privacy policy

Last updated: September 2026

Controller

The data controller is Andrzej Kubacki (contact via akubacki.org or LinkedIn).

Purpose — orders

We process order data (email, name, phone, delivery address) to fulfil book sales, payments, and shipping.

Purpose — marketing

With separate consent, we may send updates about the book, launch, and related news.

Payments

Payments are processed by Stripe. We do not store card details — they are handled solely by Stripe under its privacy policy.

Legal basis

Contract performance (GDPR Art. 6(1)(b)); marketing, analytics, and ads — consent (Art. 6(1)(a)).

Analytics and ads

If you accept cookies, we use Google Analytics 4 (Google Ireland Ltd.) to measure traffic and Google Ads performance, and the TikTok Pixel (TikTok Technology Limited) to measure TikTok ad performance. After a purchase we may also send a Purchase event to the TikTok Events API (email and phone as SHA-256 hashes) to attribute the conversion. You can withdraw cookie consent by clearing site cookies and choosing Reject again.

Retention

Order data is kept for periods required by tax and accounting law. Marketing consent — until withdrawn.

Your rights

You may request access, rectification, erasure, restriction, portability, withdraw consent, and lodge a complaint with your supervisory authority.

Hosting and security

Data is stored in Google Cloud Firestore (europe-west1). Emails are sent via Mailgun. The form is protected with Cloudflare Turnstile verification.