Plain-language version: we count visits with Google Analytics, but only if you say yes. Until you accept, no analytics script loads and no cookie is set. We never use your data for advertising and we don't sell or share it. You can change your choice at any time with the “Cookie settings” link at the bottom of every page.
This site (getbraincore.com) is operated by Vitalii Cherepanov as a sole proprietor based in Novi Sad, Serbia. Contact: [email protected].
The same person is the data controller responsible for this Privacy Policy. See the Imprint for full legal contact details.
When you visit any page, the web server (nginx) records standard access logs. This is unavoidable for any website on the internet. Specifically:
No fingerprinting, no advertising pixels, no third-party trackers.
If you click “Accept analytics” in the cookie banner, the site loads Google Analytics 4 (measurement ID G-ZR5LSRH3L2) to count visits and see which pages are read. Google Analytics then processes:
_ga and _ga_ZR5LSRH3L2 cookies
We have switched off Google signals and ad personalization, so this data is not linked to your Google account and is not used for advertising. If you click “Reject”, or if your browser sends a Global Privacy Control signal, Google Analytics does not load at all. Your choice is stored in your browser (localStorage, key analytics-consent) for 12 months, after which we ask again.
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
_ga | Google Analytics | Distinguishes visitors (only after consent) | 2 years |
_ga_ZR5LSRH3L2 | Google Analytics | Keeps the session state (only after consent) | 2 years |
No other cookies are set. If you withdraw consent, we delete these cookies from your browser.
If you click any "Apply for design partner", "Become design partner", "Contact sales", or similar button on this site, your email client opens with a pre-filled draft. If you choose to send the email, we receive your email address and whatever you wrote. We read your message, reply, and that's it.
Lawful basis: legitimate interest under GDPR Article 6(1)(f). Specifically: detecting abuse, debugging server issues, and basic security monitoring (rate limiting, blocking malicious requests).
We do not analyze logs for marketing purposes. We do not build user profiles. We do not enrich logs with third-party data.
Lawful basis: your consent under GDPR Article 6(1)(a) and Article 5(3) of the ePrivacy Directive (and the equivalent rules in the UK, Switzerland and Serbia). You can withdraw consent at any time through “Cookie settings”; withdrawal does not affect processing that took place before it.
Lawful basis: your explicit action under GDPR Article 6(1)(b) (steps prior to entering a contract) when you write to apply for design partner access, or legitimate interest under Article 6(1)(f) for general inquiries. By emailing us, you implicitly consent to us reading and replying to your email.
Web server access logs are rotated and deleted after 14 days, except where a specific entry indicates an ongoing security incident under active investigation, in which case it is retained until the incident is resolved.
Google Analytics keeps event data for 14 months at most, after which it is deleted automatically. Aggregated reports (for example, monthly visit counts) contain no personal data and may be kept longer.
Email threads with you are retained for up to 24 months after the last message in the thread, then deleted. If we enter a business relationship with you (you become a design partner, customer, or contractor), retention extends as legally required for tax and contractual records.
Server logs are stored on infrastructure operated by Hetzner Online GmbH, located in Germany (EU). Hetzner is the data processor for these logs and is bound by a Data Processing Agreement under GDPR Article 28.
Edge traffic (DNS resolution, DDoS protection, TLS termination) is handled by Cloudflare, Inc., a US-based provider, before reaching the origin server. Cloudflare may briefly process your IP for these purposes. Cloudflare provides Standard Contractual Clauses for international data transfer compliance.
Analytics data (only after consent) is processed by Google Ireland Limited for visitors from the EEA, the UK and Switzerland, and by Google LLC (USA) elsewhere, under Google's data processing terms. Data may be transferred to the USA; Google LLC is certified under the EU–US Data Privacy Framework (and its UK and Swiss extensions) and also relies on Standard Contractual Clauses.
Email is processed by the email provider serving vbcherepanov.com. We do not transfer your email content to additional third parties.
No one. We do not sell, rent, share, or trade any data we collect. The only third parties who touch your data are the infrastructure providers listed above (Hetzner, Cloudflare, email host) to deliver this website and email, and Google as our analytics processor if you consent.
If you are in the European Economic Area, the UK, or Switzerland, you have the following rights under GDPR:
To exercise any of these rights, email [email protected]. We respond within 30 days.
You have the right to know what personal information we collect, to access it, to correct it, to delete it, and to opt out of its sale, its sharing for cross-context behavioural advertising, and targeted advertising. We do not sell or share personal information and do not use it for targeted advertising. We honour the Global Privacy Control signal as an opt-out: when your browser sends it, analytics does not load. We do not process sensitive personal information and will not discriminate against you for exercising your rights. To exercise them, email the address above; you may also use an authorised agent.
Visitors in Canada (PIPEDA), Brazil (LGPD), Australia (Privacy Act 1988), Japan, South Korea, India and other countries have comparable rights to access, correct and delete their data and to withdraw consent. Write to the same address and we will respond within 30 days, or sooner where your law requires it.
This site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has shared information with us, email [email protected] and we will delete it.
If we change this policy, we update the date below. For material changes, we will publish the diff. We do not have an email list to notify subscribers because we do not have an email list.
Email [email protected]. We read every email.