privacy policy

Last updated: 6 June 2026

1. Data controller

The controller of your data is [Name / company], [address], e-mail: [e-mail]. For data matters, write to this address.

2. What data and why

• Purchases: name, e-mail and payment data processed to fulfil your order (basis: performance of contract). Payment is handled by Stripe, which processes card data.
• Newsletter: your e-mail if you subscribe via Substack (basis: your consent).
• Analytics: anonymous Google Analytics stats — only after you accept cookies (basis: consent).
• “Ask Agnieszka” chat: this is an AI assistant. Your message text is sent to the model provider (Vercel AI Gateway, with OpenRouter as a fallback, which route requests to Google’s Gemini model) solely to generate a reply (basis: our legitimate interest, Art. 6(1)(f) GDPR). Please do not enter sensitive data (e.g. health information) in the chat.

3. Recipients & processors

We use trusted providers: Vercel (hosting), Stripe (payments), Substack (newsletter), Google (analytics), Vercel AI Gateway and OpenRouter together with Google (AI chat). For the chat and some services, data may be transferred outside the EEA, including to the USA, under Standard Contractual Clauses (SCC). Chat messages are not used to train models.

4. Cookies

The site runs without unnecessary cookies. Analytics cookies (Google Analytics) load only after you click “accept” on the banner. You can change consent in the footer (“cookie settings”). Essential preferences (e.g. language, cart) are stored locally in your browser.

5. Retention

Purchase data is kept for the period required by law (incl. tax). Consents — until withdrawn. Chat messages are not permanently stored by the Seller; the model provider may retain them briefly to prevent abuse.

6. Your rights

You have the right to access, rectify, erase, restrict and port your data, to object, and to withdraw consent at any time. You may also lodge a complaint with the supervisory authority. To exercise your rights, write to [e-mail].