Privacybeleid

1. Plain-English Summary

We run a research-education website. We collect minimal data. We don't sell it. We use Google Analytics 4 to understand traffic. We use cookies; you can decline non-essential ones via the banner. If you give us your email, we email you and only us. You have rights to access, correct, delete, and export your data — see Section 8.

2. Who We Are (Data Controller)

WolveStack ("we," "us," "our") is the data controller for personal data collected via wolvestack.com. Contact: wolvestack@pm.me. For GDPR/UK GDPR matters, the same address acts as our point of contact under Article 27 GDPR; if you are in the EU/UK and require an EU representative or UK representative, please contact us at this email and we will provide one for any specific data subject request.

3. What We Collect

Automatically (every visitor): IP address (truncated by Google before storage in GA4), browser type, device type, operating system, pages viewed, time on site, referrer, approximate geographic region (country/region only), and cookie identifiers. Collected via Google Analytics 4 and standard server logs.

Voluntarily (if you submit a form): email address, any free-text you type into a form. We collect nothing else.

We do NOT collect: precise location, government identifiers, biometric data, financial data, health data, contact lists, photos, or anything else not listed above.

4. Why We Collect It (Lawful Bases under GDPR Art. 6)

• Legitimate interests (Art. 6(1)(f)): running the site, understanding traffic, preventing abuse, securing infrastructure.
• Consent (Art. 6(1)(a)): non-essential cookies (analytics, advertising). You give consent via the cookie banner; you may withdraw it any time by clearing cookies and revisiting the site.
• Performance of a contract (Art. 6(1)(b)): if you sign up for a newsletter or download, we process your email to deliver what you asked for.

5. Cookies and Similar Technologies

We use the following categories. The cookie banner lets you accept or decline non-essential categories.

• Strictly necessary: session cookies for navigation. Cannot be disabled — required to render the site.
• Analytics: Google Analytics 4 (_ga, _ga_*). Anonymizes IP. Retention: 14 months. Optional.
• Affiliate tracking: set by third-party vendors when you click an affiliate link. Governed by their privacy policies. Optional.

You can also block cookies via your browser settings, install the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout), or enable Do Not Track. We honor Global Privacy Control (GPC) signals where required by law.

6. Sharing and Third-Party Processors

We share personal data only with the following sub-processors, each under a Data Processing Agreement:

• Google LLC (Google Analytics 4) — anonymized analytics. EU/EEA data is processed under the EU-US Data Privacy Framework.
• Netlify, Inc. (hosting and CDN) — server logs, infrastructure.
• Cloudflare, Inc. (security/CDN, where applicable) — bot mitigation, DDoS protection.
• Email service provider (only if you subscribe) — newsletter delivery.

We do not sell, rent, or share your personal data for cross-context behavioral advertising. We do not use it for AI training.

7. International Transfers

If you are in the EU/UK, your data may be transferred to the United States. Such transfers are protected by the EU-US Data Privacy Framework (Google), Standard Contractual Clauses (where applicable), and the UK International Data Transfer Addendum. You may request a copy of the safeguards in place by emailing wolvestack@pm.me.

8. Your Rights

Depending on your jurisdiction, you have the following rights. To exercise any of them, email wolvestack@pm.me with the subject line "Data Subject Request." We will respond within 30 days (GDPR/UK GDPR), 45 days (CCPA/CPRA), 30 days (LGPD), or as required by your local law.

• EU/UK (GDPR / UK GDPR): access, rectification, erasure ("right to be forgotten"), restriction, portability, objection, and the right to lodge a complaint with your supervisory authority (e.g., ICO in the UK, CNIL in France, BfDI in Germany). You may also withdraw consent at any time.
• California (CCPA/CPRA): right to know, right to delete, right to correct, right to opt out of sale/sharing (we do not sell or share for cross-context advertising), right to limit use of sensitive personal information (we collect none), and right to non-discrimination.
• Other US states (CO, CT, VA, UT, OR, TX, etc.): rights similar to California, exercisable through the same email.
• Canada (PIPEDA): access, correction, withdrawal of consent, complaint to the Office of the Privacy Commissioner of Canada.
• Brazil (LGPD): confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing, withdrawal of consent.
• Australia (Privacy Act 1988): access and correction; complaint to the Office of the Australian Information Commissioner (OAIC).
• Other jurisdictions: we honor reasonable requests in line with applicable law.

9. Retention

Email subscribers: until you unsubscribe. Analytics data: 14 months (Google's default). Server logs: 30 days. We delete or anonymize personal data when no longer needed for the purpose collected.

10. Children

This site is for adults aged 18 and over (21+ in some jurisdictions). We do not knowingly collect data from children under 16. If you believe a child has submitted data, contact us and we will delete it.

11. Security

We use HTTPS, modern TLS, content security policies, and reputable hosting providers. No system is 100% secure; you assume the risks of internet transmission.

12. Changes

We may update this Privacy Policy. Material changes will be flagged at the top of this page; we will not retroactively reduce your rights without your consent.

13. Complaints

If you believe we have processed your data unlawfully, please contact us first at wolvestack@pm.me. You also have the right to lodge a complaint with the data-protection authority in your country.