Privacy notice

This notice covers the website supabrain.cloud. The site has no forms, no accounts and no chat. Visit statistics run only if you allow them, and only as far as you allow.

Who is responsible

Nikita Speranskii, trading as Supa Brain, Megobroba street, 12, Kobuleti, 6200, Georgia, [email protected]. Write to this address with any question or request about your data.

Always, without a choice

• Server logs. To deliver the pages and stop abuse, Cloudflare and our web server record each request: IP address, time, address requested, browser (user agent) and the referring page. The legal basis is our legitimate interest in running the site. Our server overwrites its logs automatically as they grow; they are not used for statistics.
• Your privacy choice. Kept in your browser's local storage under sb-consent, with the version of this notice and the time you chose, so we don't ask on every page. It never leaves your device. While a changed choice reloads the page, the browser also keeps a short note, sb-consent-new, in session storage for that one reload.

The site sets no cookies and loads nothing from other websites.

Only if you allow it

We use PostHog, on its EU cloud in Frankfurt, to understand whether the page answers people's questions. You choose in the banner, and you can change the choice at any time under Privacy settings at the bottom of every page. Nothing is switched on in advance.

• Visit statistics. Pages viewed, how far you scroll, which sections were on screen, clicks on our email address and copying it, and your choice in the banner. Also the browser, device type, screen size, language and referring page. This runs without cookies and stores nothing on your device: PostHog tells visits apart by a hash of the IP address and browser with a salt that changes every day. IP addresses are not stored.
• Recognise return visits. A random ID in a first-party cookie and in local storage (names starting with ph_) for one year, so a second visit counts as the same visitor. The ID is not linked to your name or email.
• Session recordings. A recording of how the page was used: scrolling, clicks, pointer movement and the page as you saw it. Text typed into fields is masked. Without return visits, the recording's ID is kept in session storage and disappears when you close the tab.

The legal basis is your consent (Article 6(1)(a) of the GDPR and the UK GDPR, and the ePrivacy rules on storing data on your device). PostHog keeps events for up to one year and recordings for up to 30 days, then deletes them.

When you email us

Your email goes through Google Workspace. We keep the correspondence for as long as we need it to talk to you and for our business records, and delete it on request unless the law requires us to keep it.

Who processes the data

• Cloudflare, Inc.: delivers the site and protects it from abuse.
• netcup GmbH, Germany: hosts our server.
• PostHog, Inc.: visit statistics, EU cloud in Frankfurt, only with your consent.
• Google LLC: email (Google Workspace).

Some of them are based in the United States. Transfers rely on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses with the UK Addendum.

What we never do

We do not sell or share your data, use it for advertising, or combine it with data from other sources. We honour the Global Privacy Control and Do Not Track signals: if your browser sends either, we treat it as a no and don't ask.

Your rights

You can ask for a copy of your data, have it corrected or deleted, object to its use, or take it elsewhere. You can withdraw consent at any time, as easily as you gave it: under Privacy settings, or by clearing this site's data in your browser. Withdrawing deletes what PostHog stored on your device; it does not affect what was collected before. Write to [email protected], and we will reply within one month. You can also complain to your data protection authority, for example the ICO in the UK, the Data Protection Commission in Ireland or the authority in your EU country. Residents of California and other US states have the same rights to know, delete and correct, and we don't discriminate against anyone who uses them.

Children

The site is for businesses and is not meant for children.

Changes

When this notice changes, the date at the top changes, and the banner asks for your choice again.