Privacy Policy
Last updated: 29 October 2026
Who is responsible
Paulus is run by Pavlo Ryzhov, based in Amsterdam, the Netherlands. He is responsible for the personal data collected on this site. Contact: hello@paulus.studio.
What is collected
·When you send the contact form: your name, a few words about your business, a link to your site or Instagram if you add one, and your email or WhatsApp number.
·When you visit the site: the pages you open, which parts of the home page you reach, the buttons you press and whether you send the contact form, your country, your type of device (phone, tablet or computer), the website or app that sent you here, and which ad you came from, if any.
·How visits are counted: the counter does not store your IP address or browser details. It uses them only briefly, to work out your country, your device type and a short visitor code. It sets no cookie. The code is made with a random key that is deleted after two days, so once the key is gone the code cannot be matched with your IP address. If your browser sends the Global Privacy Control signal, the counter records nothing.
·How fast the pages load: for each page you open, how quickly it loads and reacts and how much its layout jumps while it loads, with the page address, your browser, your type of device and its operating system, your country and your connection speed. The measurements are not tied to you or to your IP address, and they cannot be used to follow you from page to page.
Why, and on what basis
·To reply to your request and prepare a written scope. Basis: steps taken at your request before a contract (Article 6(1)(b) GDPR).
·To see which pages, buttons and forms work, which ads bring visitors, and to keep the site secure. Basis: legitimate interest (Article 6(1)(f) GDPR).
Your data is not sold, not used for advertising and not added to a newsletter.
Who processes it
·Vercel: hosting of the site, basic visit statistics and page speed measurements.
·Supabase: storage of requests and usage data, in a data centre in the European Union.
·Resend: delivery of the notification email.
·Apple (iCloud Mail): email replies.
·WhatsApp (Meta): if you write to me on WhatsApp, WhatsApp's own privacy terms apply.
Some of these providers are based outside the European Union. Such transfers rely on the safeguards the provider offers, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long it is kept
·Requests that do not lead to a project: deleted after 12 months.
·Requests that lead to a project: kept for the project and for as long as tax and accounting rules require.
·Usage data: deleted after 13 months.
Cookies
The site uses no advertising or tracking cookies.
Your rights
You can ask to see, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to hello@paulus.studio, and you get a reply within one month. You can also complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Changes
When this policy changes, the new version appears on this page with a new date.