Last updated: 2 October 2026
The short version
- Nothing that tracks you loads before you agree to it. Until you accept, this site makes no request to any other company.
- The only third party involved in reading the site is Google Analytics, and only if you allow statistics cookies.
- If you subscribe to the newsletter, your email address goes to Kit, the service that sends it, and you are only subscribed after you confirm by email.
- If you write through the contact form, what you send is used to answer you. It is not added to a mailing list, sold, or passed to anyone else.
- There is no advertising, no ad network, and no profiling of readers.
Who is responsible for your data
GrowthStackPulse is published and operated by a private individual, who is the controller of the personal data described here.
- Name: Jakub Zachveja
- Country: Slovakia
- Postal address: provided on request, by email
- Email: [email protected]
There is no data protection officer, because the site is not of a size or kind that requires one. Write to the address above with any question about your data and it reaches the person who can answer it.
When you simply read the site
Opening a page on this site sends a request to the web server, and that request carries the IP address of your device, the address of the page you asked for, the date and time, your browser and operating system, and, if you followed a link, the page you came from. This is how the web works: without it, no page can be sent back to you.
That information is recorded in access logs held by the site’s hosting provider and by Cloudflare, which sits in front of the site to deliver pages quickly and to absorb attacks. Both keep those logs for a limited period under their own settings, and they are used only to keep the site running and secure. They are not used to build a profile of you, and they are not combined with anything else on this page.
Cloudflare’s security check may set a cookie on your device. It is listed, with its purpose and lifetime, in the Cookie Policy.
The fonts and every other file this site needs are served from this site’s own domain. Reading a page here does not call Google Fonts or any other outside service, so before you make a choice on the cookie banner your browser talks to nobody but this site and Cloudflare.
When you subscribe to the newsletter
The newsletter form asks only for your email address. When you submit it, this site passes the address to Kit, the email service that sends the newsletter. Your browser does not connect to Kit; the website does it on your behalf.
Kit then sends you one confirmation email. You are only subscribed once you click the button in it. If you never click it, you receive nothing else.
Kit stores your email address, when you signed up and confirmed, the page you signed up from, and, for each newsletter, whether it was delivered, opened and which links were clicked. That is used to send the newsletter and to see which pieces readers find useful, and for nothing else. It is not sold, not used for advertising, and not combined with the analytics data.
To stop automated sign-ups, the website keeps a scrambled (hashed) version of your IP address for 15 minutes after you submit the form, to limit how many attempts can come from one place. It is never stored in readable form and is not sent to Kit.
Every newsletter has an unsubscribe link at the bottom. One click stops all newsletter emails. If you also want your address removed from Kit completely, write to [email protected] and it will be deleted.
When you use the contact form
The contact form asks for your first name, your surname, your email address, a short line describing what your message is about, and the message itself. You also have to tick a box confirming you are happy for that to be stored so it can be answered.
What you send is saved in this website’s own database and emailed to [email protected], a mailbox at the site’s hosting provider. The form software also records the date and time of the submission and the IP address of the device it came from, as a defence against automated spam.
It is used to read and answer your message, and for nothing else. It is not added to the mailing list, it is not used for marketing, and it is not shared with anyone outside the parties named in this policy.
Analytics
If, and only if, you accept statistics cookies on the banner, this site loads Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Until you accept, the Analytics script is blocked and does not run.
It is used to see which articles are read, which are ignored, roughly which country readers are in, and whether they arrived from a search engine, a link or a chat assistant. The purpose is editorial: knowing what is worth writing more of.
How it is configured here:
- IP anonymisation is on, so your full IP address is not stored in the analytics data.
- Data is kept for 14 months and then deleted automatically by Google.
- Google Signals is off, so nothing is linked to a Google account or used to build a cross-site advertising audience.
- The option to share the data with Google for its own products and services is off.
- The measurement runs under a data processing agreement with Google.
You can change your mind at any time in the Cookie Policy, which shows the choice you made and lets you withdraw it. Google also offers a browser add-on that blocks Analytics on every site, at tools.google.com/dlpage/gaoptout.
Cookies
Which cookies this site can place, what each one does and how long it lasts is set out in full in the Cookie Policy, together with the choice you made and how to change it. The newsletter form sets no cookies.
What this site does not do
- No email address is added to the newsletter without your confirmation, and no address from the contact form is ever added to it.
- Comments are not open, so no comment data is collected.
- There is no advertising and no ad network on any page.
- No personal data is sold, rented or exchanged.
- No decision about you is made automatically, and no reader is profiled.
- No special category data is asked for. Please do not send health, political, religious or similar information through the contact form.
Why this processing is allowed
Under the General Data Protection Regulation, every use of personal data needs a legal basis. These are the ones relied on here.
- Delivering pages and keeping the site secure: legitimate interests, Article 6(1)(f). Sending a page to the device that asked for it, and defending the site against attack, cannot be done without processing the request.
- The newsletter: your consent, Article 6(1)(a), given by submitting the form and confirming by email, and withdrawable at any time through the unsubscribe link. The short-lived hashed IP check against automated sign-ups rests on legitimate interests, Article 6(1)(f).
- The contact form: your consent, Article 6(1)(a), given by ticking the box, together with the legitimate interest in answering correspondence that is addressed to us.
- Analytics: your consent, Article 6(1)(a), given on the cookie banner and withdrawable at any time.
Do you have to give any data?
No. Every page can be read without giving anything beyond what your browser sends to load it, and you can refuse statistics cookies without losing access to anything. The newsletter needs an email address to reach you, and the contact form needs your name and email address so that a reply can reach you. If you would rather not give them, the only consequence is that you don’t get the newsletter or that the form cannot be sent.
Who else can see your data
Nobody sees it who is not needed to run the site. The parties involved are:
- WebCreators, s.r.o., trading as HostCreators, Československej armády 24, 974 01 Banská Bystrica, Slovakia. Hosts the website, its database and the editorial mailbox.
- Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Provides the domain’s DNS, delivers pages and filters malicious traffic.
- Kit (kit.com), 600 1st Ave, Ste 330, PMB 92768, Seattle, WA 98104, USA. Sends the newsletter and stores subscriber details, and only for people who subscribe.
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Provides Google Analytics, and only where you have consented to it.
Each of them acts on instructions as a processor. Beyond that, data would be disclosed only if the law required it.
Transfers outside the EU
Hosting and the mailbox are in Slovakia. Cloudflare and Google are contracted through their Irish or European entities, but both are US-headquartered and may process data outside the European Economic Area. Kit is based in the United States, so newsletter subscriber data is stored there. Where data leaves the EEA, it does so on the safeguards these companies rely on for such transfers: currently the European Commission’s adequacy decision for the EU-US Data Privacy Framework, under which Kit is certified, and the Commission’s standard contractual clauses, which are part of Kit’s data processing addendum.
How long data is kept
- Newsletter subscribers: for as long as you stay subscribed. If you unsubscribe, you receive nothing further; on request, your address is deleted from Kit entirely.
- Contact form entries and the emails that follow: kept while your enquiry is being dealt with and for as long as there is a reason to be able to look it up again, and in any case deleted no later than 24 months after the last message between us.
- Analytics data: 14 months, then deleted by Google automatically.
- Server and security logs: a short period set by the hosting provider and by Cloudflare, for availability and security only. The hashed IP used against automated newsletter sign-ups: 15 minutes.
- Your cookie choice: stored on your own device for the period given in the Cookie Policy, so you are not asked again on every page.
Your rights
Where this site holds personal data about you, the GDPR gives you the right to:
- ask what is held and get a copy of it;
- have anything inaccurate corrected;
- have it deleted;
- have its use restricted while a question about it is resolved;
- object to processing that rests on legitimate interests;
- receive it in a portable, machine-readable form;
- withdraw consent at any time, which stops the processing that depended on it from that point on.
To use any of them, write to [email protected]. You will get an answer as soon as possible and within one month. There is no charge, and you do not have to give a reason.
If you want to complain
Raising it directly is usually faster, but you have the right to go to the supervisory authority instead of, or as well as, writing here.
Personal Data Protection Office of the Slovak Republic
Hraničná 12, 820 07 Bratislava 27, Slovakia
dataprotection.gov.sk
Children
This is a publication for people who work in business software. It is not aimed at children, and no data is knowingly collected from anyone under 16. If you believe a child has subscribed or sent something through the contact form, write to the address above and it will be deleted.
Changes to this policy
If what the site does with data changes, this page changes with it, and the date at the top changes too. That date is the version that applies.