Privacy Policy
1. Who we are
Fanatical Code – Kamil Skrzypiński (NIP 8891435783, e-mail support@fanaticalcode.com) operates fanaticalcode.com and acts as the data controller.
We are not obliged to appoint a Data-Protection Officer because we process only pseudonymised usage data and no special-category data.
2. What data we process and why
| Data category | Source | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Server access logs (IP, User-Agent, timestamp, requested URL) | Automatically by Cloudflare CDN | Operate the site, detect abuse, debug (legitimate interest) | Art. 6 (1)(f) |
| Aggregated usage metrics (page views, referrer, country, device type, Core Web Vitals) | Cloudflare Web Analytics beacon; no cookies | Understand traffic patterns and improve content (legitimate interest) | Art. 6 (1)(f) |
We do not collect names, emails, comments, payments or any other directly identifying information.
3. Cookies & similar technologies
- No analytics cookies: Cloudflare Web Analytics "does not use any client-side state such as cookies or localStorage".
- Essential Cloudflare cookies: Only short-lived, security-purpose cookies (e.g.
cf_bm,cf_clearance) may be set to mitigate bots or rate-limit attacks; the older__cfduidcookie was deprecated in 2021. These cookies are strictly necessary and therefore exempt from consent banners under Recital 30 GDPR.
4. Recipients & international transfers
Data are shared solely with:
- Cloudflare, Inc. (CDN, security edge and analytics). Cloudflare processes data under our instructions and stores it on servers that may be outside the EEA. Transfers rely on the Standard Contractual Clauses adopted by Commission Decision 2021/914.
No other third parties receive your data.
5. Retention periods
- Server logs: maximum 180 days, unless required for a security investigation.
- Analytics aggregates: 13 months, the default for Cloudflare Web Analytics. After these periods the data are deleted or irreversibly aggregated.
6. Your rights
You may request access, rectification, erasure, restriction, objection or portability of any personal data we hold (Arts. 15-20 GDPR) and you may withdraw consent at any time where consent was the basis (Art. 7 (3)). To exercise these rights, e-mail support@fanaticalcode.com. You also have the right to lodge a complaint with your local supervisory authority (Art. 77).
7. Is data provision mandatory?
Supplying personal data is not a statutory or contractual requirement. If you disable Cloudflare cookies at browser level the site will still load, but some security functions (e.g., CAPTCHA bypass) may fail.
8. Automated decision-making
We do not use profiling or automated decisions that produce legal or similarly significant effects (Art. 22).
9. Security measures
Traffic is served over TLS 1.3 with HSTS; Cloudflare’s Web Application Firewall and DDoS mitigation protect the site; log access is restricted to authorised personnel in line with Art. 32.
10. Changes to this notice
Major changes will be announced on this page. Last updated: 28 May 2025 in accordance with Art. 13 (3).