1. Controller and contact
The data controller is Przemysław Filipiak, operating under the delta240mvt brand. Correspondence address: ul. Maków Polnych 12a, 61-606 Poznań, Poland.
For privacy matters and to exercise your rights, write to hello@fewsummers.com. You can also use delta240mvt@gmail.com. No Data Protection Officer has been appointed; data matters are handled personally by the controller.
2. The Summers Left calculator
The calculator asks for a child’s date of birth and, optionally, a first name. Both are processed only in your browser, on your device: nothing is sent to our server or to anyone else, and nothing is stored after you close or reload the page.
The Story image is drawn in your browser too. It leaves your device only if you share or save it yourself, for example to Instagram; from then on the rules of the app you share it with apply.
3. Visiting the site
The site is delivered by Cloudflare. To show you a page, Cloudflare’s servers receive your IP address, the time and address of the request, and technical headers (for example the browser and the referring page). This is needed to deliver the site, keep it available and protect it from abuse. Legal basis: Article 6(1)(f) GDPR, the legitimate interest in running the site securely.
We use Cloudflare Web Analytics to count visits. It sets no cookies, does not store anything in your browser and does not build a profile of you; we see aggregated numbers such as page views, referring sites, countries and device types. Legal basis: Article 6(1)(f) GDPR, the legitimate interest in knowing whether the site is useful.
The films on the page are files served by this site; watching them does not connect you to Instagram or YouTube.
4. Ritual emails and launch emails
You can leave your email address under the calculator (“tiny rituals by email, never more than one a week”) or next to a kit marked “coming soon” (the launch email for that kit and the rituals). Signing up is voluntary and works by double opt-in: we send a confirmation link, and nothing else is sent until you click it.
We process your email address, where you signed up (the calculator or a kit, and which kit), the campaign tags in the link you arrived by (utm_source, utm_medium, utm_campaign), and the time of the request and of the confirmation. Brevo (Sendinblue) handles the confirmation, sending and unsubscribing, and records deliveries, bounces and — depending on your email app — opens and clicks.
Legal basis: your consent, Article 6(1)(a) GDPR; commercial information is sent in accordance with Article 398 of the Polish Electronic Communications Law. Protecting the form, keeping proof of consent and honouring unsubscribes rely on Article 6(1)(f) GDPR.
If our email provider cannot be reached when you sign up, your sign-up waits in Cloudflare’s storage for at most 30 days, only so that the confirmation email can be sent as soon as possible; then it is deleted. To stop abuse, the sign-up endpoint limits how many requests one IP address can make per minute; it does not log email or IP addresses.
You can unsubscribe with the link in every email or by writing to us. Withdrawing consent does not affect the lawfulness of earlier processing.
5. Cookies and browser storage
The site sets no cookies and stores nothing in your browser’s local or session storage. There is no cookie banner because there is nothing to consent to.
The only exception is Cloudflare’s own security protection: if it sees traffic that looks automated or abusive, it may set a strictly necessary security cookie (such as __cf_bm or cf_clearance) to tell people from bots. These are not used for analytics or advertising.
6. Providers and recipients
- Cloudflare, Inc.: hosting, content delivery, DNS, the sign-up endpoint and its temporary queue, Web Analytics, and forwarding of emails sent to our address.
- Brevo (Sendinblue): sign-up confirmation, sending and unsubscribing for the ritual and launch emails, and message event data.
- Google (Gmail): the mailbox that receives correspondence, including messages forwarded from our address.
These providers process data within the scope of their services, acting as processors on our instructions or, for their own purposes described in their policies, as separate controllers. Data may also be received by people providing technical, accounting or legal services, only as far as their task requires, and by authorities where the law requires it.
Links to Instagram and delta240mvt.com lead to separate services with their own privacy rules.
7. Transfers outside the EEA
Providers may use infrastructure and support outside the European Economic Area, including in the USA. In that case appropriate safeguards are used: European Commission adequacy decisions (including the EU–US Data Privacy Framework for the entities it covers) or standard contractual clauses with the required supplementary measures. Write to us to learn which safeguards apply and how to get a copy.
8. How long data is kept
- Calculator: not at all — it never leaves your device.
- Emails: until you unsubscribe or the emails end. After unsubscribing, limited proof of consent and a suppression entry may remain for as long as needed to honour it or resolve claims. An unconfirmed sign-up is used only to send the confirmation and protect against abuse.
- The temporary sign-up queue: until our email provider accepts the sign-up, at most 30 days.
- Correspondence: as long as needed to handle the matter, then up to 12 months, unless a message has to be kept because of a legal obligation or claims.
- Server and security logs at Cloudflare: for the provider’s standard periods needed to deliver and protect the service.
9. Your rights
Under the GDPR you can request access to your data and a copy of it, rectification, erasure, restriction of processing and data portability, and you can object to processing based on legitimate interest. An objection to direct marketing is unconditional. You can withdraw consent at any time.
Send requests to hello@fewsummers.com or to the correspondence address above. We reply without undue delay, as a rule within one month. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).
10. Children
The site is meant for parents and other adults. The child’s date of birth and name typed into the calculator stay on your device and never reach us. Please do not sign a child up for emails.
11. Security and changes
The site is served only over HTTPS. When features, providers or purposes change, this policy is updated with a new date, and where new consent is required, it is asked for first.