Privacy policy

Last updated: 24 October 2026

This website processes little data: what you type into the newsletter form, the technical data needed to load the page and protect it from spam, and, only if you accept it in the cookie notice, browsing data to measure visits (Google Analytics) and the results of my ads (Meta Pixel). If you reject those cookies, nothing from Google or Meta is loaded. I do not sell your data to anyone.

At a glance

1. Data controller

Dmytro Tytarenko, private individual, Spanish tax ID (NIF/NIE) Z1593225C, address Carrer de la Peanya, 5, Esc F, 4º-10ª, 46022 Valencia, Spain. Email: dmytro@thecrazy100.com.

I process your data personally, as the author of the book. No company acts as a controller, except Meta at the specific stage explained in section 5.

2. What data I process and why

Email newsletter

If you subscribe, I process:

• your email address;
• the language or languages of the book you are interested in (Ukrainian, English, Spanish) and the language of the page you subscribed from;
• the record of your consent: the ticked box, the date and time you signed up and confirmed, and the technical data Brevo keeps as proof of that confirmation (such as your IP address).

Subscription is double opt-in: after you submit the form, you will receive an email with a link, and you are only subscribed once you click it. If you don't confirm, you won't hear from me again.

I use this data to send you news about the book (its release, the editions in the language or languages you chose, and materials on this website) and, from time to time, about my other projects. My emails contain no tracking pixels: I don't know whether you open them or which links you click.

Technical data from your visit

Whenever a page loads, your browser sends, as with any website, certain technical data: IP address, date and time, the page requested, browser type, and device. This data is received by:

• Vercel, which hosts the website and keeps technical logs for a limited time to run it and detect abuse;
• Adobe Fonts, which serves the website's fonts; according to Adobe, the IP address is used to deliver the fonts and is not stored, and no cookies are set;
• Cloudflare Turnstile, which checks that whoever submits the form is a person and not a bot; it processes the IP address, browser, and technical connection data, and sets no persistent cookies.

Your browser also stores your cookie choice (accepted or rejected, by category, and the date) so that it can be respected and I can show that you made it.

The legal basis is my legitimate interest (Article 6(1)(f) GDPR) in serving the website, protecting it from spam, and remembering your cookie choice. You can object by emailing me, although the website cannot be displayed without this data.

Visitor analytics (Google Analytics 4): only with your consent

If you accept analytics cookies, I use Google Analytics 4 to see how many people visit the website, which pages they read, their approximate country or city, the type of device and browser, which site they came from, and which buttons they click (for example, the book store buttons). Google Analytics gives your browser a pseudonymous identifier stored in a cookie. According to Google, IP addresses of EU users are used only to derive an approximate location and are discarded without being logged. I see aggregated statistics: I don't know who you are.

Ad measurement (Meta Pixel): only with your consent

If you accept advertising cookies, the website loads the Meta Pixel, which sends Meta the pages you visit and certain actions (for example, clicking a buy button or subscribing to the newsletter), along with a browser identifier, your IP address, and browser data. I use it to measure whether my ads on Facebook and Instagram bring visitors to the website and readers to the book, and to show ads for the book to people who have already visited the website. If you have a Facebook or Instagram account, Meta may link this data to it.

I do not send Meta your email address or any other form data.

3. Legal basis

• Newsletter: your consent (Article 6(1)(a) of Regulation (EU) 2016/679, the GDPR), which you give by ticking the box and confirming your email.
• Analytics and ad measurement: your consent (Article 6(1)(a) GDPR and Article 22(2) of Spain's LSSI-CE), which you give in the cookie notice, separately for each category.
• Technical data: my legitimate interest (Article 6(1)(f) GDPR), as explained above.

You can withdraw any consent at any time, as easily as you gave it: for the newsletter, use the unsubscribe link in every email; for cookies, use the "Cookie settings" link in the footer. Withdrawing does not affect anything done before.

You must be at least 14 years old to subscribe (Article 7 of Spain's Organic Law 3/2018, LOPDGDD).

4. How long I keep it

• Newsletter: for as long as you stay subscribed. If you unsubscribe, I remove you from the list. I keep only your email and the proof of your consent, blocked, for the period during which claims could be brought against me (up to three years), as provided in Article 32 LOPDGDD, plus your email on Brevo's suppression list so that you are not emailed again by mistake.
• Unconfirmed sign-ups: deleted within 30 days at most.
• Google Analytics: data about each visit is kept for 14 months and then deleted automatically; reports keep only aggregated figures.
• Meta Pixel: Meta keeps the data under its own policy; each cookie's lifespan is listed in the Cookie policy.
• Your cookie choice: 12 months; after that, you will be asked again.
• Technical data: for the limited period set out in each provider's policy (Vercel, Cloudflare); Adobe Fonts does not store it.

5. Who else processes your data

I do not give your data to third parties to use for their own purposes, except as explained below for Meta. To run the website and the newsletter, I rely on the following providers, which act as processors on my behalf under contracts that comply with Article 28 GDPR:

Cloudflare states that, to improve its bot detection, it processes some of this technical data as a controller in its own right; see its Turnstile privacy addendum.

Meta Platforms Ireland Limited (Ireland), with its parent Meta Platforms, Inc. (USA), is not just a processor. Under the Court of Justice of the EU's Fashion ID judgment (Case C-40/17, July 29, 2019), Meta and I are joint controllers only for collecting your data through the pixel and transmitting it to Meta; our respective obligations are set out in Meta's Controller Addendum. What Meta does with the data afterwards (for example, combining it with your account data to measure and show ads) is decided by Meta as sole controller, under its Privacy Policy. You can exercise your rights with me or with Meta.

I would only disclose data to an authority if required by law.

6. International transfers

Vercel, Cloudflare, Adobe, Google, and Meta are U.S. companies or part of U.S. groups and may process data in the United States. All of them participate in the EU-U.S. Data Privacy Framework (European Commission adequacy decision of July 10, 2023); Vercel and Cloudflare also provide for the Commission's standard contractual clauses in their contracts. Brevo processes data in the European Union; where one of its sub-processors is outside it, Brevo applies standard contractual clauses.

7. Your rights

You can ask me at any time to:

• access, correct, or delete your data;
• restrict or object to its processing;
• receive it in a structured format (portability);
• withdraw your consent.

To unsubscribe from the newsletter, use the one-click link in every email, or email me.

To change or withdraw your cookie consent, use the "Cookie settings" link at the bottom of any page.

For any other request, email dmytro@thecrazy100.com from the subscribed address so that I can check it's you. I will reply within one month. Note that Google Analytics and Meta Pixel data is pseudonymous: to find it, I would need the cookie identifier from your browser.

If you believe I have mishandled your data, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es, or with the data protection authority in your country of residence. I'd appreciate it if you wrote to me first: almost anything can be sorted out by email.

8. Security

The website is served over HTTPS only, and only I have access to the subscriber list and to the analytics and advertising accounts.

9. Changes to this policy

If anything important changes (for example, if I add another provider or a new purpose), I will update this page before the change, ask for your consent again where needed, and, if it affects the newsletter, let you know by email.