Privacy — cāive

What gets collected

Browsing this site. Nothing is stored by me. There's no analytics package and no cookie banner because there are no cookies to consent to. Your theme choice (dark or light) is kept in your own browser's local storage and never leaves your device.

The Normal Tuesday Test. Everything you type into the free tool runs entirely inside your browser. It is never sent anywhere, never stored on a server, and I never see it. Close the tab and it's gone.

The email list. If you subscribe, your email address is stored by MailerLite, who send the emails on my behalf. I use it to send occasional short emails and nothing else. Every email has an unsubscribe link, and unsubscribing deletes you from the list.

Booking a session. Scheduling runs through Cal.com and payment through Stripe. Cal.com receives your name, email and chosen time. Stripe receives your payment details — I never see your card number, and neither does this website. Both are processors acting on my instructions.

The session itself. Your intake answers and my notes are what the written summary is built from. I keep them for two years so that if you come back, I have context. Nothing about a session is ever shared with anyone.

Hosting. The site is hosted by Hostinger, whose servers keep standard access logs including IP addresses, for security and troubleshooting.

The one third party worth naming

Fonts load from Google Fonts, which means Google's servers see your IP address when a page loads. It's a common setup and it's the only external request this site makes, but you should know it happens. If that bothers you, tell me and I'll self-host the fonts — it's a small change.

Why I'm allowed to hold any of it

Contract. Booking details and session notes exist because you asked me to do work for you and I can't do it otherwise.
Consent. The email list. You opted in; you can opt out in one click.
Legal obligation. Payment records, which tax law requires me to keep for five years.
Legitimate interest. Server logs, for keeping the site up and secure.

How long things stay

Session notes and summaries — two years, then deleted.
Payment records — five years, because I have to.
Email list — until you unsubscribe.
Server logs — a matter of weeks, set by Hostinger.

What you can ask for

Under GDPR you can ask me for a copy of everything I hold on you, ask me to correct it, ask me to delete it, ask me to stop using it, or object to how I'm using it. Email hello@caive.net and I'll do it within a month, usually within a few days. No form, no hoops.

If you think I've handled your data badly and I haven't fixed it, you can complain to the Polish data protection authority (UODO) or the equivalent body where you live.

Writing about sessions

I sometimes write about the patterns that come up in this work. If I ever write about a specific session, it is anonymised past the point of recognition and I ask your explicit permission first. Silence isn't permission.