Plain-language version: we don't track you, we don't have analytics, we don't have cookies, and we don't sell anything. The only data we touch is what your browser sends to our server when you visit a page.
This site (getbraincore.com) is operated by Vitalii Cherepanov as a sole proprietor based in Novi Sad, Serbia. Contact: [email protected].
The same person is the data controller responsible for this Privacy Policy. See the Imprint for full legal contact details.
When you visit any page, the web server (nginx) records standard access logs. This is unavoidable for any website on the internet. Specifically:
No cookies, no fingerprinting, no analytics scripts, no advertising pixels, no third-party trackers.
If you click any "Apply for design partner", "Become design partner", "Contact sales", or similar button on this site, your email client opens with a pre-filled draft. If you choose to send the email, we receive your email address and whatever you wrote. We read your message, reply, and that's it.
Lawful basis: legitimate interest under GDPR Article 6(1)(f). Specifically: detecting abuse, debugging server issues, and basic security monitoring (rate limiting, blocking malicious requests).
We do not analyze logs for marketing purposes. We do not build user profiles. We do not enrich logs with third-party data.
Lawful basis: your explicit action under GDPR Article 6(1)(b) (steps prior to entering a contract) when you write to apply for design partner access, or legitimate interest under Article 6(1)(f) for general inquiries. By emailing us, you implicitly consent to us reading and replying to your email.
Web server access logs are rotated and deleted after 14 days, except where a specific entry indicates an ongoing security incident under active investigation, in which case it is retained until the incident is resolved.
Email threads with you are retained for up to 24 months after the last message in the thread, then deleted. If we enter a business relationship with you (you become a design partner, customer, or contractor), retention extends as legally required for tax and contractual records.
Server logs are stored on infrastructure operated by Hetzner Online GmbH, located in Germany (EU). Hetzner is the data processor for these logs and is bound by a Data Processing Agreement under GDPR Article 28.
Edge traffic (DNS resolution, DDoS protection, TLS termination) is handled by Cloudflare, Inc., a US-based provider, before reaching the origin server. Cloudflare may briefly process your IP for these purposes. Cloudflare provides Standard Contractual Clauses for international data transfer compliance.
Email is processed by the email provider serving vbcherepanov.com. We do not transfer your email content to additional third parties.
No one. We do not sell, rent, share, or trade any data we collect. The only third parties who touch your data are infrastructure providers (Hetzner, Cloudflare, email host) listed above, and only to deliver this website and email service.
If you are in the European Economic Area, the UK, or Switzerland, you have the following rights under GDPR:
To exercise any of these rights, email [email protected]. We respond within 30 days.
California residents have similar rights under the CCPA, including the right to know, delete, and opt out of sale. We do not sell personal information. To exercise rights, email the same address above.
This site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has shared information with us, email [email protected] and we will delete it.
If we change this policy, we update the date below. For material changes, we will publish the diff. We do not have an email list to notify subscribers because we do not have an email list.
Email [email protected]. We read every email.