We take your privacy seriously, but we also believe privacy policies shouldn’t require a law degree to understand. Here’s how we handle your data at poland.gg — plainly and honestly.
The short version: poland.gg is a free, login-free, public open-data viewer. We run no advertising. If you visit from the EU, the EEA, the UK or Switzerland, we load no third-party analytics and set no tracking cookies. Visitors from everywhere else get two analytics tools, Google Analytics and Microsoft Clarity, described below. The personal data we handle directly is the email address you give us if you subscribe to the newsletter, the basic technical request data every web server needs to operate, and our own cookieless visit statistics.
Who We Are
Poland.gg is run by Matt Rybin, trading as MATT RYBIN MATTRYBIN (NIP: 6793260169, REGON: 524468418), based in Kraków, Poland.
For the purposes of the General Data Protection Regulation (GDPR), we are the data controller responsible for your personal data.
Contact: [email protected]
What Data We Collect
Newsletter — If you subscribe to our newsletter, we store your email address (and your language preference, so we email you in the right language). We use it to send you a one-time confirmation link and, once confirmed, the newsletter itself. There are no accounts, no passwords, and no payment details — poland.gg is free to use.
Operational request data — Like any web server, ours processes basic technical information for each request: your IP address, user-agent (browser/device), the requested URL (including its parameters), the referring URL, and connection details. We use this to keep the site secure and reliable and to understand aggregate traffic patterns. It is not used to build a profile of you, and it is not shared with any advertising or analytics network.
Visit statistics — Our own code, with no cookies and no third-party tools, records which pages are viewed and for how long, where the visit came from (the referring address and campaign tags), the browser type and screen width, your approximate location (country and region) and the network your device connects from. To count unique visits, we create a hash of your IP address and browser that changes every day. We do not store the IP address itself.
Why We Collect Your Data
Under the GDPR, we need a legal basis for processing your data. Here’s what applies:
Consent (Article 6(1)(a)) — Sending you newsletter emails. You opt in, and you can change your mind anytime by unsubscribing (every email has a link).
Legitimate interests (Article 6(1)(f)) — Processing operational request data and keeping visit statistics to keep the site secure, reliable, and working well, and, for visitors outside the EU, the EEA, the UK and Switzerland, using Google Analytics and Microsoft Clarity to understand how the site is used. You can object to this (see Your Rights).
Analytics Outside Europe
We check which country your request comes from (our network provider, Cloudflare, tells us). What happens next depends on the answer.
In the EU, the EEA, the UK or Switzerland — we load no third-party analytics at all. Your browser never contacts Google or Microsoft through poland.gg. The same applies when we can’t tell where you are.
Everywhere else — we load two tools that show us how the site is used:
- Google Analytics 4 (Google LLC) counts page views and simple interactions such as scrolling, clicks on outside links and file downloads. It sets the
_gaand_ga_*cookies to recognise a returning browser. Google Analytics does not log or store IP addresses. We have turned off Google signals, ads personalization and user-provided data collection, so this data is not linked to Google accounts or used for advertising. - Microsoft Clarity (Microsoft Corporation) records how pages are used — clicks, scrolling and mouse movement — so we can see where the site is confusing. It masks the text you type. It sets the
_clckand_clskcookies, and Microsoft may set its ownMUIDcookie.
We never load either tool for crawlers or bots.
Both providers may process this data in the United States. We use it only to improve the site. We don’t use the Google Ads tag, PostHog, or any advertising service, and we don’t sell or share your data with data brokers.
To opt out, block cookies for poland.gg in your browser, use a content blocker, or install Google’s Analytics opt-out add-on.
Cookies
Poland.gg itself uses only strictly-necessary cookies — a session cookie that keeps the site working, protects against cross-site request forgery and holds basic technical details about your visit (such as your browser and where you came from). These don’t require consent because the site genuinely can’t function without them, and they don’t track you across sites.
Some features also keep small pieces of data in your browser’s storage (localStorage), such as your chosen theme, values you typed into calculators, a daily check counter or map data. They stay in your browser and are not sent to our server.
Visitors from the EU, the EEA, the UK and Switzerland get no analytics or advertising cookies, so we show no cookie banner — there is nothing to consent to. Outside those regions, Google Analytics and Microsoft Clarity set the cookies listed above.
Operational Telemetry
To keep the site reliable, we send technical request data (including IP address and user-agent) to our observability provider, Honeycomb, which we use purely for first-party monitoring and debugging — never for marketing or profiling. Honeycomb stores this data in its EU region. When we analyse it with AI tools, including Honeycomb’s own AI features, parts of it may be processed in the United States under the EU-US Data Privacy Framework or standard contractual clauses. This processing rests on our legitimate interest in a secure, working service, and you can object to it.
NIP Verifier
Our NIP Verifier can check a Polish tax number (NIP) against the VAT taxpayer register (Wykaz podatników VAT). The Head of the National Revenue Administration keeps that register public under Article 96b of the VAT Act, so that anyone can check a business they deal with.
How it works — When you click “Check NIP”, your browser sends the number straight to the Ministry of Finance (wl-api.mf.gov.pl) and shows you the answer. The number and the result never reach our server, and we don’t store them. Your browser only keeps a count of how many checks you made today.
What it shows — The fields the register returns: name, VAT status, addresses, registration date, REGON, KRS, bank account numbers, and representatives, partners and commercial proxies.
Our role — We are the controller for how the tool asks the register and shows the answer. Our legal basis is our legitimate interest, and yours, in being able to check a counterparty (Article 6(1)(f) GDPR). We don’t know whose number is checked, so we can’t tell that person directly (Article 14(5)(b) GDPR). This section is how we inform them.
Outside Europe — For visitors outside the EU, the EEA, the UK and Switzerland, Microsoft Clarity (see Analytics Outside Europe) may record what the page shows, including a result.
Hiding your record — If your business is in the register and you don’t want our tool to show it, email [email protected] with your NIP. We will hide your record in the tool. This does not change the register itself. To do that, contact the Ministry of Finance.
Who Receives Data
We use providers that process data on our behalf as our processors: hosting (servers in the EU), content delivery and protection (Cloudflare), databases, email delivery (the newsletter), monitoring (Honeycomb) and the mailbox we use for correspondence. Some of them are companies based in the United States or other countries outside the EEA. When data leaves the EEA, we rely on a European Commission adequacy decision (such as the EU-US Data Privacy Framework) or on standard contractual clauses.
How Long We Keep Your Data
We don’t keep data longer than we need to:
Newsletter data — kept while you’re subscribed. Unsubscribe and we stop using your email; we remove it on request.
Operational telemetry — retained for up to 60 days for security and debugging, then aged out automatically.
Visit statistics — kept for as long as we need them to analyse traffic on the site. They contain no IP address.
Google Analytics — Google keeps event-level data for 14 months, then deletes it. Aggregated reports (for example, page views per month) contain no personal data and are kept longer.
Microsoft Clarity — Microsoft keeps recordings for 30 days, and heatmaps and aggregated data for up to 13 months.
Your Rights
Wherever you are, you have the rights the GDPR gives you. You can:
Access — ask for a copy of the data we hold about you.
Rectification — ask us to fix anything that’s wrong or incomplete.
Erasure — ask us to delete your data (the “right to be forgotten”).
Restriction — ask us to temporarily stop processing your data.
Data portability — get your data in a structured, machine-readable format.
Objection — object to processing based on our legitimate interests, including the operational telemetry and visit statistics.
Withdraw consent — unsubscribe from the newsletter anytime. That won’t affect anything we did before you withdrew it.
To exercise any of these, email us at [email protected]. We’ll respond within 30 days.
If you’re not happy with how we handle things, you can lodge a complaint with the Polish supervisory authority:
Urząd Ochrony Danych Osobowych (UODO) ul. Stawki 2, 00-193 Warszawa uodo.gov.pl
Children’s Privacy
Poland.gg isn’t designed for children under 16, and we don’t knowingly collect their data. If you believe a child has shared personal data with us, let us know and we’ll remove it.
Changes to This Policy
We may update this policy from time to time. When we do, we’ll update the date at the top. No surprises — just check back occasionally if you’re curious.
Contact
Questions about your data or this policy? Reach out anytime.
Email: [email protected] Phone: +48 452 904 992