Privacy Policy
Last updated: July 9, 2026
This Privacy Policy explains how WavePillars collects and uses personal data when you browse wavepillars.com, contact us, or take a quiz.
Who we are
The data controller is IT Busina KIRYL BAHDANOVICH, operating as a sole proprietorship (JDG) in Poland.
- Address: ul. Łąkowa 60b, Gdańsk, Poland
- NIP: 5833449376
- REGON: 521863657
- Email: privacy@wavepillars.com
WavePillars operates the website at wavepillars.com, a catalog of hands-on engineering practice assessments and a founder-led delivery studio site.
Information we collect
Depending on how you use the site, we may process:
Contact form. When you use the contact form, we collect your name, email address, and message.
Quiz activity. Your answers, score, and timer state during an assessment run in your browser only. We do not upload quiz responses or results to our servers.
Technical and usage data. Our hosting provider and analytics tools (only after you accept analytics cookies) may collect information such as IP address, browser type, pages visited, and referring URL. We use short-lived in-memory rate limits keyed by IP on certain API routes to reduce abuse; those counters are not kept as a long-term log.
How we use information
We use the information above to:
- Provide and operate the assessment catalog, quiz experience, and contact requests
- Understand aggregate site usage and improve the service (with your consent for analytics)
- Protect the site from fraud, abuse, and misconfiguration
We do not sell your personal information. We do not use your data for third-party advertising profiles.
AI tools and your data
The operator may use third-party AI tools when creating or editing site content (for example, proofreading articles or formatting assessment drafts).
Personal data collected through the Service—such as browsing activity handled by our hosting provider, quiz activity in your browser, contact form submissions, or analytics data—is not fed into those editorial AI workflows unless we explicitly tell you otherwise in an updated policy.
We do not use AI to make automated decisions about you as a user of the Service. For how we create and review content, see Terms & Conditions.
Legal bases (EEA/UK)
If you are in the European Economic Area or the United Kingdom, we process personal data on the following bases:
| Purpose | Legal basis |
|---|---|
| Contact requests and related communication | Performance of steps at your request; legitimate interest in responding to inquiries |
| Website security, rate limiting, and operation | Legitimate interest in protecting and running our services |
| Analytics (Google Analytics, Ahrefs) | Consent |
| Compliance with legal obligations | Legal obligation |
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Cookies and local storage
See our Cookie Policy for details. In summary:
- Browser local storage stores your analytics consent choice
- Analytics cookies are set only if you click Accept in the cookie banner
Sharing and subprocessors
We share data only as needed to operate the service:
| Provider | Role | Location |
|---|---|---|
| Google Analytics (with consent) | Global (may include US) | |
| Resend | Contact form emails | United States |
| Cloudflare | Hosting, security, and content delivery | Global (may include US) |
| Ahrefs | Website analytics (with consent) | Global (may include US) |
Each provider’s own privacy policy governs how they process data on their systems.
International transfers
We and our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses and processor commitments under applicable data protection law.
Data retention
- Contact form messages are retained for up to 24 months after your last message, or until you request deletion, whichever is sooner
- Analytics data is retained according to each provider’s settings and your consent status
Server and provider logs may be retained for a limited period for security, debugging, and billing, according to each provider’s practices.
Security
We use HTTPS and work to apply reasonable safeguards appropriate to the data we handle. No method of transmission or storage is completely secure.
Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to certain processing
- Data portability (where applicable)
- Withdraw consent (where processing is based on consent)
- Lodge a complaint with a supervisory authority
EEA/UK residents may contact their local authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO) — uodo.gov.pl.
To exercise your rights, email privacy@wavepillars.com or use our contact form.
US privacy notice
We do not sell or share personal information for cross-context behavioral advertising. If you are a US resident and believe you have rights under applicable state privacy laws, contact privacy@wavepillars.com. We will respond as required by applicable law.
Children
WavePillars is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.
Changes
We may update this policy from time to time. The “Last updated” date at the top of this page indicates when it was last revised. Continued use of the site after changes means you accept the revised policy.
Contact
Questions about this policy? Email privacy@wavepillars.com or use our contact form.
See also our Cookie Policy and Terms & Conditions.
Polish version: Polityka prywatności.
wavepillars.com