Privacy Policy

This Privacy Policy explains what information we collect when you visit tomek.io (the "Site"), how we use it, and the rights you have over it. We aim to keep this short and plain spoken.

1. Who we are

The Site is operated by Tomekio LLC, a California limited liability company. For the purposes of the EU and UK General Data Protection Regulation (GDPR), Tomekio LLC is the data controller.

Mailing address: 1401 21st St, Ste R, Sacramento, CA 95811
Privacy contact: hello@tomek.io

2. What we collect

tomek.io is a brochure style website. We do not offer accounts, forms, comments, or transactions, so we collect very little. Specifically:

Analytics data

We use Google Analytics (provided by Google LLC) and PostHog (provided by PostHog Inc.) to understand how visitors use the Site. These tools may collect:

• Pages you view and the order you view them in
• Approximate location derived from your IP address (typically city or region level)
• Device and browser type, operating system, screen size, and language
• Referring website or search term
• Time spent on pages and basic interaction events (clicks, scrolls)
• A pseudonymous identifier stored in a cookie or local storage so we can recognize repeat visits

We do not use analytics to identify you personally, and we do not link analytics data to your real world identity.

Server and hosting logs

The Site is hosted on GitHub Pages (provided by GitHub, Inc.). GitHub automatically collects standard request logs, including IP addresses, for security, abuse prevention, and reliability purposes. We do not have direct access to these logs. GitHub's handling of this data is governed by the GitHub Privacy Statement.

Email correspondence

If you email us at hello@tomek.io or any other Tomekio address, we receive your email address, your name (if provided), and the contents of your message. We use this only to respond to you.

We do not collect Social Security numbers, payment card numbers, government IDs, health information, or precise geolocation data through the Site.

3. Cookies and similar technologies

Google Analytics and PostHog set cookies or use local storage to function. These are not strictly necessary for the Site to work, and you can block or delete them using your browser settings or a browser extension. We do not use cookies for advertising or cross site tracking.

4. Why we use this information and our legal basis

We use the limited information we collect to:

• Understand which content is useful and improve the Site
• Diagnose technical problems and protect against abuse
• Respond to messages you send us

For visitors in the EU and UK, our legal bases under the GDPR are:

• Consent (Article 6(1)(a)) for analytics cookies, where required.
• Legitimate interests (Article 6(1)(f)) for understanding aggregate Site usage and maintaining security, where consent is not required. Our legitimate interest is operating and improving a small informational website, balanced against your privacy rights.
• Legitimate interests (Article 6(1)(f)) for responding to your email.

5. Who we share information with

We do not sell your personal information, and we do not share it with advertisers or data brokers. We share limited data only with the service providers that help us run the Site:

We may also disclose information if required by law, subpoena, or valid legal process, or to protect our rights, safety, or property.

6. International data transfers

Our service providers are based in the United States and may process data in the US and other countries. If you are visiting from the EU, UK, or Switzerland, your information may be transferred outside your home jurisdiction. Where required, our providers rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU US Data Privacy Framework.

7. How long we keep data

• Analytics data: retained according to the default settings of Google Analytics and PostHog, typically between 7 and 14 months for individual event data, and longer for aggregated reports.
• Email correspondence: retained for as long as needed to handle your inquiry and for a reasonable period afterward for our records, then deleted.

8. Your rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access: request a copy of the information we hold about you.
• Correction: ask us to fix inaccurate information.
• Deletion: ask us to delete information we hold about you.
• Objection or restriction: object to or limit certain processing.
• Portability: receive your information in a portable format.
• Withdraw consent: where we rely on consent, withdraw it at any time.

California residents have additional rights under the California Consumer Privacy Act, as amended by the CPRA, including the right to know, the right to delete, the right to correct, and the right to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA.

To exercise any of these rights, email us at hello@tomek.io. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

9. Do Not Track and Global Privacy Control

Some browsers transmit "Do Not Track" or Global Privacy Control (GPC) signals. We honor GPC signals as a valid opt out request from California residents and from visitors in jurisdictions where GPC is legally recognized.

10. Children

The Site is not directed to children under 13 (or under 16 in the EU and UK), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Security

We rely on our service providers' security measures to protect the limited information we collect. No method of transmission over the internet is fully secure, however, and we cannot guarantee absolute security.

12. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. Material changes will be highlighted on the Site where reasonable.

13. Contact

Questions, requests, or complaints about privacy? Reach us at:

Tomekio LLC
1401 21st St, Ste R
Sacramento, CA 95811
hello@tomek.io