Privacy

1. Data controller

The data controller is Michał Kosiorek, trading as ArkLink Michał Kosiorek (Polish business register CEIDG, VAT ID/NIP 9522098675), Poland. Contact: hello@arklink.co.

2. Cookies

Functional storage (no consent needed - strictly necessary for actions you request): the “ark-lang” cookie remembers your language choice and is only set when you click the EN/PL switcher (12 months); an “ark-consent” localStorage entry remembers your analytics choice.

Analytics cookies (only with your consent): if you click “Allow”, PostHog sets its own cookie and localStorage entry so we can recognise returning visitors. Legal basis: Art. 6(1)(a) GDPR (consent) together with the ePrivacy rules.

If you choose “Anonymous only” - or never answer - analytics runs in cookieless mode and nothing is stored on your device. You can withdraw consent at any time by clearing this site's data in your browser, which returns you to anonymous mode.

3. Visit statistics

We measure traffic with PostHog (PostHog EU, servers in the European Union). We always collect: pages viewed, country, device type, referrer and page performance metrics.

Without your consent this runs in anonymous mode: no identifier is stored on your device, no click maps are built and no session is recorded (legal basis: Art. 6(1)(f) GDPR, legitimate interest).

3a. What consenting to analytics cookies turns on

Clicking “Allow” enables full PostHog product analytics: (a) a cookie-based identifier so we can recognise returning visitors; (b) click and scroll maps recording which elements you click and how far you scroll; (c) session replay - a replayable capture of mouse movement, clicks, scrolling and navigation on the site.

What we never record, even with consent: anything you type into form fields (all inputs are masked), passwords, browser console output, or any part of the admin panel. Recordings exist solely to improve usability, are kept for at most 30 days, and only the administrator can view them.

Legal basis: Art. 6(1)(a) GDPR (consent) together with the ePrivacy rules. Withdraw consent by clearing this site's data in your browser - you return to anonymous mode and recording stops immediately.

Retention: session recordings 30 days, analytics events (pageviews, clicks) up to 12 months. Recording runs only on arklink.co and is technically disabled on the admin panel.

4. Support form

When you file a ticket you share: your name, e-mail address, optionally a company name, and the ticket content. We process this data solely to handle your request (legal basis: Art. 6(1)(b) GDPR - steps taken at your request, and Art. 6(1)(f) - our legitimate interest in handling correspondence and defending claims).

Data is kept for the duration of the case and then for the limitation period of potential claims. Recipients may include our infrastructure providers (hosting, e-mail) acting on our instructions.

5. Server logs

The site is hosted on Vercel. The server automatically records standard logs (IP address, user agent, request time) for security and service operation (Art. 6(1)(f) GDPR). Vercel Inc. is based in the USA; transfers rely on Standard Contractual Clauses (SCC) and the Data Privacy Framework.

We also keep a separate security log. It records only events that matter for protecting the service: a support ticket being submitted, detected form abuse, a rate limit firing, and operator panel logins. Each record holds the IP address, approximate network location (country, region, city), ASN, user agent together with the tool identified from it, TLS fingerprint, timestamp, the path requested, and detector labels. The basis is the legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). The log is readable only by the operator behind two-factor authentication, and entries are deleted after 90 days.

Ordinary browsing does not enter this log. It records actions, not visits.

At /agent-access we operate a research instrument aimed at automated clients. The path is disallowed in robots.txt and linked from no navigation, so fetching it is itself a signal. If somebody fills in the form there, we store what they volunteered alongside the security log fields. The page downloads nothing, runs nothing on your device, and makes no claim about it.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with your supervisory authority (in Poland: PUODO). For any data matter write to hello@arklink.co.