last updated 29 October 2026

privacy.

Short version: this site does not ask you for any personal data, sets no cookies and runs no analytics. The only data processed is what any website needs to reach your browser.

who is responsible

This site is run by Dawid Winiarski, a private person, and is the data controller for anything described here. You can reach me about privacy at dawid@dawid.xyz or on LinkedIn.

what this site collects today

Nothing you type in. The newsletter and the scorecard are not open yet, so there is no form on this site that sends data anywhere. There are no accounts, no comments and no contact form.

The channel price waterfall calculator runs entirely in your browser. The numbers you type stay on your device and are not sent or stored anywhere.

the newsletter

When you subscribe to Security Revenue, I process your email address, the date, time and page of sign-up, the IP address you signed up from (kept as proof of your consent), and what you open and click in my emails. I use it to send the newsletter, the welcome emails and the POC kit you asked for, and to see which topics readers use. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time with the unsubscribe link in every email; withdrawing doesn't affect earlier processing.

The sign-up form passes your address through this site's hosting (Cloudflare) to SendFox, a service based in the USA that sends the emails and processes this data on my behalf. I keep your data until you unsubscribe, and keep proof of your consent for as long as the law requires me to be able to show it. If you reply to an email, the rules in the next section apply.

when you email me

If you write to me, for example to apply for a diagnostic on the work with me page, I receive your email address and whatever you put in the message. I use it only to reply and, if we decide to work together, to prepare that work. The legal basis is taking steps at your request before a contract and my legitimate interest in answering you (Article 6(1)(b) and (f) GDPR). I keep the conversation while it is useful for that purpose and delete it when you ask, unless the law requires me to keep it, for example for invoices.

No cookies are set and no analytics or advertising scripts run. Fonts and images are served from this site itself, so loading a page does not send your address to a font or image provider.

hosting

The site is hosted on Cloudflare. To deliver pages and protect the site from attacks, Cloudflare processes technical data from each request, such as your IP address, the page requested, the time and your browser's user agent. Cloudflare does this as a processor under its own data processing terms and keeps such data only as long as needed for those purposes. The legal basis is my legitimate interest in running a secure website (Article 6(1)(f) GDPR).

links to other sites

Links to LinkedIn and to the sources cited in the guides lead to sites with their own privacy rules. Nothing is shared with them when you read this site; they see your visit only if you click through.

your rights

Under the GDPR you have the right to access, correct and delete your personal data, to restrict or object to its processing, and to data portability. Since this site does not store personal data about you, most requests will have nothing to act on, and I will tell you so. You also have the right to lodge a complaint with a data protection authority. In Poland that is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).

when this changes

Before the newsletter or the scorecard open, or before any analytics is added, this page will be updated to say exactly what is collected, why, by which provider and for how long. Nothing new is collected before that update is published.