Privacy Policy

Learn how we protect your data, cookies and comments on sudoizm.online. Full privacy policy.

Last updated: 9 July 2026

General information

This document explains what data about visitors to the sudoizm.online website is collected, for what purpose and on what basis, who it may be shared with, and what rights you have. We try to limit data processing to the necessary minimum and to describe it in plain language.

Data controller

Sudoizm.online is currently a private, non-commercial undertaking run by a natural person. It is not a business or a registered organisation, and the website does not serve commercial purposes. For this reason, the person running it does not act as a data controller within the meaning of the rules that impose the full scope of obligations on commercial entities and public institutions.

Regardless of the above, we voluntarily apply the principles described in this policy, out of respect for users’ privacy and in line with the standards arising from the GDPR. The document has been prepared so that in the future — should the Sudoism movement be registered as a social organisation — it could apply in full without significant changes.

For matters concerning privacy and personal data you can contact us at: [email protected].

What data we collect, for what purpose and on what legal basis

Contact form

When you use the contact form, we process the data you provide there — usually your name or signature, e-mail address and the content of your message — solely to respond to your enquiry and continue correspondence. The basis is our legitimate interest in handling enquiries addressed to us (Article 6(1)(f) GDPR). The form is protected by Cloudflare Turnstile, which limits spam and abuse by analysing technical browser signals.

Comments

If you leave a comment, we store its content, the name and e-mail address you provide, as well as your IP address and browser information — the latter help detect spam. We use the Antispam Bee plugin, which works locally on the site, to filter it. If you use the Gravatar service, a hash of your e-mail address may be sent to it in order to display an avatar. The basis is our legitimate interest in moderating and maintaining order in the discussion (Article 6(1)(f) GDPR).

User accounts and sign-in

The site allows you to create an account, including signing in via the “Sign in with Google” service. We then process the data needed to run the account (e.g. username, e-mail address, profile information), and when signing in with Google — the basic identification data provided by that service. This is done to create and run the account at your request (Article 6(1)(b) GDPR) and — in the case of external sign-in — on the basis of your consent (Article 6(1)(a) GDPR).

AI assistant (chatbot)

An assistant based on artificial intelligence operates on the site. The content of the conversation you have with it is sent to an external AI model provider (currently DeepSeek) in order to generate a reply. This means that what you type leaves our server and may be processed outside the European Economic Area. Please do not enter personal or confidential information in the chat. The basis is our legitimate interest in providing an auxiliary feature (Article 6(1)(f) GDPR).

Statistics and analytics

To analyse traffic we use Google tools — Google Analytics 4 and Google Tag Manager. They help us understand how visitors use the site and improve its content. We run them only after you have given consent in the consent banner (Article 6(1)(a) GDPR); you can withdraw consent at any time. Details about cookies can be found in our Cookie Policy.

Security and server logs

To ensure the security of the site, we process technical data such as IP address and event information (e.g. login attempts). We use a security plugin (Solid Security) and the Cloudflare service, which mediates traffic and protects against abuse. The basis is our legitimate interest in protecting the site and its users (Article 6(1)(f) GDPR).

Data recipients and processors

In connection with the operation of the site, data may be entrusted to or shared with the following entities, only to the extent necessary:

  • Hostido.pl Gałązka sp.j. (Gdańsk) — the hosting provider on whose servers the site is maintained (Hostido privacy policy).
  • Cloudflare, Inc. — CDN, protection against abuse and the Turnstile mechanism (privacy policy).
  • Google — statistics (Google Analytics 4, Google Tag Manager), “Sign in with Google” login and — via UpdraftPlus — storage of backups on Google Drive (privacy policy).
  • DeepSeek — provider of the AI model powering the assistant (deepseek.com).
  • Automattic Inc. (Gravatar) — displaying avatars next to comments (privacy policy).
  • AddToAny — social media sharing buttons (privacy policy).

Transfer of data outside the European Economic Area

Some of the services listed (e.g. Google or the AI model provider) may process data outside the European Economic Area, including in the United States and other countries. In the case of Google, transfers take place, among other things, on the basis of the European Commission’s decision on the data protection framework (Data Privacy Framework) and standard contractual clauses. In the case of the AI model provider, data may be transferred to a third country for which no adequacy decision has been issued — which is why we ask you not to enter personal data in the chat.

How long we keep data

  • form messages — for as long as needed to handle the matter and maintain correspondence, and then until they are no longer useful;
  • comments — until they are deleted by the author or by us;
  • account data — until the account is deleted;
  • statistical data and security logs — for periods resulting from the configuration of the relevant tools.

Your rights

In connection with the processing of data you have the right to:

  • access your data and receive a copy of it;
  • rectify (correct) data;
  • erase data;
  • restrict processing;
  • object to processing based on legitimate interest;
  • data portability;
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, write to [email protected]. You also have the right to lodge a complaint with a supervisory authority — in Poland this is the President of the Personal Data Protection Office (UODO).

Embedded content and sharing buttons

Articles on the site may contain content embedded from other websites (e.g. videos or images). Such content behaves as if you had visited the given website directly — its owner may collect information about you, including through cookies. Similarly, the sharing buttons (AddToAny) may connect to social media services when they are used. In the same way, the donation button (Revolut) takes you to the revolut.me service, which is governed by Revolut’s own privacy policy.

Automated decision-making and profiling

We do not make decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you. Statistical tools may group visitors into general categories for traffic analysis purposes, but they do not serve individual profiling.

Changes to the policy

We may update the policy as the site develops or the tools used change. The current version is always available on this page, and the date of the last change is given at the beginning.