Privacy

Who is responsible

ENSOMEDIA, Radosław Fedorczuk, ul. Chorwacka 33/42, 51-107 Wrocław, Poland. NIP 8952195742, REGON 381626230.

For anything to do with your data, write to . I answer by email.

Visit statistics

Google Analytics 4 loads on every page, but it is set to store nothing until you accept it in the banner. Until then no cookie is written, nothing is kept on your device and you are not recognised on a later visit. Loading it does mean your browser contacts Google, which is why the banner is the first thing on the page.

What it records: which pages you opened, an approximate location worked out from your IP address, your device and browser type, where you arrived from, and whether a brief was sent. It never records your name or your email address.

Legal basis: your consent, Article 6(1)(a) GDPR.

Who else sees it: Google Ireland Limited as my processor. The data may reach Google servers in the United States under the EU-US Data Privacy Framework.

How long: event data for 2 months, user data for 14 months, after which Google deletes it.

Cookies used: _ga and _ga_YW5DDF8DHF, both set only after consent.

You can withdraw consent at any time with the button at the bottom of this page. Withdrawal applies from that moment on.

Click maps and visit recordings

After your yes in the banner I load Microsoft Clarity. It shows me where people click, how far down a page they scroll, and at which point of a form they stop typing. Without consent the Clarity script is never loaded and not a single request reaches Microsoft.

What it records: pointer movement, clicks, scrolling, how the page looked during the visit, and the device and browser type. From that come click maps and recordings of how a visit went. Whatever you type into form fields is masked by Clarity in the browser and never sent to Microsoft.

Legal basis: your consent, Article 6(1)(a) GDPR.

Who else sees it: Microsoft Ireland Operations Limited as processor. Microsoft may transfer data to Microsoft Corporation in the United States under standard contractual clauses.

How long: recordings are available for 30 days after the visit. Recordings marked as favourites and a random sample of recordings are kept for up to 9 months.

Cookies: _clck and _clsk on this site, plus Microsoft identifiers on the Clarity and Bing domains (CLID, MUID, ANONCHK, MR, SM), set only after consent. Each is described at https://learn.microsoft.com/clarity/setup-and-installation/clarity-cookies.

You can withdraw consent at any time with the button at the bottom of this page. Withdrawing stops the recording and removes the Clarity cookies.

Advertising and conversion measurement

The same banner consent also covers advertising measurement: Google Ads, the Meta pixel (Facebook and Instagram) and the OpenAI pixel (advertising in ChatGPT) record that a visit came from an advertisement and that a brief was sent, so I know which campaigns lead to real enquiries.

Without your consent neither the Meta script nor the OpenAI script is ever loaded, and not a single request reaches Meta or OpenAI. The Google tag loads the way the statistics section describes, with storage denied, and holds no advertising data either.

After consent the Meta script records browser events such as page views and the sending of a brief, and may set the _fbp and _fbc cookies. The OpenAI script records the sending of a brief and keeps its own identifiers in cookies and browser storage, including the click reference that arrives on the address as oppref when you come here from an advertisement in ChatGPT, and your answer to this banner. Google measurement works through the same tag as the statistics and may set its own ad click cookies.

When a brief is sent, and only with that consent in place, my server also reports this one conversion to Meta through the Conversions API: your email address as a SHA-256 hash rather than in readable form, plus the technical data of the request, meaning the IP address, the browser identification and the _fbp and _fbc cookies if they exist. The content of your brief never goes to Google, Meta or OpenAI. In the same way, and only with that consent, my server reports this one conversion to OpenAI: your email address as a SHA-256 hash, the IP address, the browser identification and OpenAI’s identifiers from its cookies (the ad click reference oppref and the browser reference), when they exist.

Purpose: measuring conversions and running ENSOMEDIA advertising campaigns. Legal basis: your consent, Article 6(1)(a) GDPR.

Recipients: Google Ireland Limited, Meta Platforms Ireland Limited and OpenAI Ireland Limited. How each of them handles this data is described in the Google privacy policy at https://policies.google.com/privacy, the Meta privacy policy at https://www.facebook.com/privacy/policy and the OpenAI European privacy policy at https://openai.com/policies/eu-privacy-policy.

You can withdraw this consent at any time: the Privacy Policy link in the footer leads to this page, and the button at its foot asks the cookie question again. Withdrawal applies from that moment on.

The brief and email

The brief is sent from this site to by a script on my own hosting, so it never passes through a third-party form service and nobody but me sees it.

The WordPress repair form reaches me the same way: the site address, the problem description, your email address and your phone number if you give one.

So do the short forms on the service pages and in the articles: a description of what you need, the site address if you give one, and your email address.

If you would rather not send it through the site, the Copy brief button puts the whole thing on your clipboard and you can send it from your own mail program. It is the same text I would have received from the form.

So the form cannot be turned into a spam relay, a hash of the sender IP address stays in the server temporary storage for one hour and is used only to limit how many briefs one sender can post. Basis: my legitimate interest, Article 6(1)(f) GDPR.

What I receive: whatever you fill in, usually a name, an email address, a company and a description of the project.

Why: to answer you and to prepare a proposal.

Legal basis: steps taken at your request before entering a contract, Article 6(1)(b) GDPR, and your consent for anything beyond that, Article 6(1)(a).

How long: no more than 12 months after our last contact, unless the conversation turns into a project, in which case the paperwork is kept for as long as tax law requires.

The AI assistant on this site

The Ask a question button opens a chat with an AI assistant. A program answers, not a person, and it says so in the chat window.

What is passed on: your question together with a few earlier messages from the same conversation. To write the answer I send them to a language model run by Groq, Inc. in the USA, which acts as a processor under a data processing agreement with standard contractual clauses. Groq does not use this data to train models, and my account has Zero Data Retention switched on.

What I keep: the question, the answer, the time and a hash of the IP address, never the address itself. It shows me what people ask about and lets me limit how many questions one address can send. How long: up to three months, after which the file is deleted.

I also get a copy of each conversation by email, in my own mailbox on the same hosting as this site, with the time and the page it started on. If you leave your email address in the chat, in the field under the first answer or in a message, I get it with the conversation and use it only to reply to you. Legal basis: steps taken at your request before entering a contract, Article 6(1)(b) GDPR. I keep those emails for no more than 12 months after our last contact.

Please do not type in anything you would rather not share, such as a phone number or someone else's details. The brief is the place to talk about a specific project.

Legal basis: my legitimate interest, Article 6(1)(f) GDPR, in answering questions about my work and keeping the chat safe from abuse.

The conversation itself also stays in your browser until you close the tab, so it does not vanish when you move to another page.

Server logs

The site is hosted by Hostido, which records standard access logs: IP address, time, the address requested and the browser used. They exist for keeping the site running and secure.

Legal basis: my legitimate interest, Article 6(1)(f) GDPR.

What your browser remembers

Besides the analytics and advertising cookies described above, your language choice and your answer to the banner are kept in your browser local storage. Both stay on your device and never reach me.

Your rights

You have the right to see your data, correct it, have it deleted, restrict how it is used, object to use based on legitimate interest, receive it in a portable form, and withdraw consent at any time.

Write to .

If you believe I am handling your data unlawfully, you can complain to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

What this site does not do

No measurement of any kind before your consent, no automated decisions with legal effect, and no sharing or selling of data to anyone other than the providers named above. Clarity click maps and advertising measurement for Google, Meta and OpenAI run only after your yes in the banner, and withdrawing it stops them.