Ivan Solves Things

Privacy Policy

Effective date: July 15, 2026

1. Overview

I respect your privacy and am committed to protecting your personal data. This policy explains how I collect, use, and store information when you use this portfolio site (Ivan Solves Things).

Data controller: Ivan Shushka, operating as Ivan Solves Things. For privacy requests, email [email protected].

This site is not directed at children under 16. Please do not submit a child’s email address via the waitlist or otherwise.

2. Information I Collect and Store

2.1 Local Storage (Your Device)

The following data may be stored locally on your device and is not sent to my servers:

  • Privacy notice acknowledgment (so the banner is not shown on every visit)
  • Temporary privacy banner dismiss for the current browser session

Legal basis: Not applicable as controller processing — this data stays on your device.

You can clear this local data at any time using your browser settings or the tools in Section 8. Analytics are described in Section 2.2.

2.2 Website Analytics

I use privacy-focused analytics (Umami Cloud) as a processor to understand aggregate traffic: page views, referrer, country, browser, and device type. If you arrive via a tagged link, optional campaign parameters in the URL (for example utm_source, utm_medium, utm_campaign) are recorded in aggregate only. Analytics does not identify you by name or email, does not use advertising trackers, and does not sell data. See Umami’s privacy policy for how they process analytics data.

Legal basis (GDPR): Legitimate interests (Art. 6(1)(f)) — understanding how the site is used so I can improve it, in a privacy-preserving way without advertising profiling.

2.3 Server-Side Data

The following data may be processed on servers that host this site:

  • System logs from site and API requests (anonymized where possible, for security and debugging)
  • Rate limiting data (in-memory only, not persisted)

Legal basis (GDPR): Legitimate interests (Art. 6(1)(f)) — security, abuse prevention, and reliable operation of the site.

I protect server-side data with HTTPS, access controls, and standard operational safeguards, and use it for site functionality and security — not for advertising.

2.4 Beta Waitlist (Mars)

If you join the Mars beta waitlist, I collect and store the following personal data on my servers:

  • Email address — required to notify you when beta access opens
  • Signup source — which page you signed up from (for internal analytics only)
  • Signup date and time — when you joined the waitlist

Legal basis (GDPR): Your consent (Art. 6(1)(a)), given when you submit your email address. You can withdraw consent at any time by removing your email using the tool in Section 8.

Purpose: To contact you about Mars beta access and closely related product announcements only. Your email is not sold, rented, or used for unrelated marketing.

Waitlist data is stored in a MariaDB database on infrastructure I control. It is not shared with third-party marketing platforms.

3. Cookies and Local Storage

This website does not set first-party cookies for analytics or advertising. Limited data may be stored in your browser’s localStorage and sessionStorage as described in Section 2.1, which you can clear via your browser settings or Section 8.

If you open an external service from this site (for example Calendly to book a call), that service may set its own cookies under its own privacy policy.

4. Direct Communication and Waitlist

This website does not provide a general public contact form. If you contact me through LinkedIn, Calendly, or email, the data you share is also handled by those platforms under their policies.

The Mars beta waitlist is the only form on this site that collects personal data directly. By submitting your email, you consent to its storage and use as described in Section 2.4.

Any communication data retained by me is used solely to respond and coordinate follow-up.

5. Third-Party Services

I use the following third-party services:

  • Umami Cloud: Analytics processor for aggregate traffic statistics (page views, referrer, country, browser, device). No Google Analytics or ad pixels are used. See umami.is/privacy.
  • Cloudflare R2: Object storage for site images and static assets. Waitlist personal data is not stored in R2.
  • Hosting / MariaDB: The site application and waitlist database run on infrastructure I control. Waitlist emails, signup source, and timestamps are stored there.
  • Calendly: If you book a discovery call, Calendly processes scheduling details under Calendly’s privacy policy. I may receive your name, email, and meeting details to run the call.
  • LinkedIn: Outbound profile links only. This site does not load LinkedIn tracking pixels.

International transfers: Some providers (including Umami Cloud and Calendly) may process data outside the European Economic Area. Where they do, they rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms described in their privacy documentation.

6. Your Rights Under GDPR

This public site does not offer user accounts. Under the GDPR and other applicable privacy regulations, you may still have rights regarding personal data processed in connection with your visit:

6.1 Right to Access

You can view locally stored data in your browser’s developer tools or with the tools in Section 8. For waitlist or other access requests, email me as described in Section 9.

6.2 Right to Deletion

Clear your browser’s localStorage using Section 8 or your browser settings. If you joined the Mars beta waitlist, use the removal tool in Section 8 to delete your email from the live database. Analytics on this site is aggregate and does not identify you by name or email. For other privacy requests, contact me as described in Section 9.

6.3 Right to Withdraw Consent

Waitlist signup is based on consent. You may withdraw consent at any time by removing your email via Section 8, without affecting the lawfulness of processing before withdrawal.

6.4 Right to Rectification and Portability

To correct your waitlist email or request a copy of the personal data I hold about you, email me as described in Section 9.

6.5 Right to Restriction

You may ask me to restrict processing of your personal data in the circumstances set out in Art. 18 GDPR by contacting me as described in Section 9.

6.6 Right to Object

Where processing is based on legitimate interests (for example analytics or security logs), you may object under Art. 21 GDPR. Contact me as described in Section 9 and I will review your request.

6.7 Automated Decision-Making

I do not use automated decision-making or profiling that produces legal or similarly significant effects about you.

6.8 Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe my processing of your personal data infringes applicable law.

7. Data Retention and Security

7.1 Data Retention

  • Local storage: Retained until you clear your browser data
  • Analytics: Aggregate statistics retained by Umami Cloud according to their retention settings and privacy policy
  • Waitlist emails: Retained until you remove them (Section 8), until 6 months after a beta invite is sent, or until the waitlist is closed — whichever comes first. Removal deletes the email from the live database. Copies may remain in encrypted backups or operational logs for up to about 30 days until those rotate out.
  • Server logs: Typically retained up to 90 days for security and operations, anonymized where possible
  • Rate limiting data: Temporary, in-memory only, cleared automatically

7.2 Security Measures

  • HTTPS encryption for all communications
  • Rate limiting on API endpoints to prevent abuse
  • Input validation and sanitization on server requests

8. Data Management Tools

You have the following tools available to manage your data:

Remove Waitlist Email

If you joined the Mars beta waitlist, enter your email below to delete it from the live database. This exercises your right to erasure under the GDPR.

Clear Local Data

Remove all locally stored data on this site, including your privacy notice acknowledgment.

View Stored Data

See what data is currently stored in your browser.

9. Contact

If you have questions about this privacy policy or wish to exercise your rights regarding your personal data, contact:

Secondary channels: LinkedIn or Calendly — for privacy requests, prefer email so there is a clear record.

10. Changes to This Policy

I may update this privacy policy from time to time. The effective date at the top of this page will change when I do. Material changes may also reset the on-site privacy notice so you see an updated summary.