Contact

Privacy Policy

Last updated: 11 October 2026

We respect your privacy. The playdrive.org website is designed to collect as little data as possible: we do not use cookies, advertising, tracking pixels or tools such as Google Analytics. We count visits with a tool that sets no cookies and builds no user profiles. Below we explain when and what personal data we process, in line with the EU General Data Protection Regulation 2016/679 (GDPR).

1. Data controller

The controller of your personal data is Łukasz Liebersbach, who runs the Play Drive project (“Play Drive”, “we”). For any question about your personal data, contact us by email at hello [at] playdrive.org or through the contact form.

We have not appointed a data protection officer, as we are not required to.

2. What data we process and why

Browsing the website

The website is hosted by Cloudflare. When you visit it, your browser – as with any website – sends technical data: your IP address, browser and operating system type, the address of the page you visit and the time of your visit. Cloudflare uses this data only to deliver the website and to protect it against attacks and abuse. We do not analyse this data ourselves or use it to build statistics or profiles.

Legal basis: our legitimate interest in running the website securely and reliably (Article 6(1)(f) GDPR).

Visitor statistics

To know how many people visit the website and which articles are read most, we use Cloudflare Web Analytics. It collects the address of the page you visit, the site you came from (for example a search engine or LinkedIn), your browser and device type, your country (derived from your IP address) and how long the page took to load. Cloudflare Web Analytics does not set cookies or store anything else on your device, does not build profiles and does not track you across websites. We only see aggregated statistics – we cannot tell who an individual visitor is.

Legal basis: our legitimate interest in understanding which content is useful and developing the campaign (Article 6(1)(f) GDPR). You can object – email us, or block the statistics script in your browser (for example with a tracker-blocking extension).

Contact form

When you send a message, you give us your email address and your message (required) and your name (optional). We also record the address of the page the form was sent from. We use this data only to reply to your message and continue the conversation – for example about a talk or workshop.

Legal basis: our legitimate interest in answering messages sent to us (Article 6(1)(f) GDPR) and, where your message concerns working together, steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).

Providing your data is voluntary, but without an email address and a message we cannot reply.

Protecting the form against spam

To tell people from bots, the form uses Cloudflare Turnstile. It only starts when you begin filling in the form and checks technical data about your browser and device (such as your IP address and browser characteristics). Turnstile is not used for tracking or advertising. The form also contains a hidden trap field for bots and checks how long it took to fill in – this information is not stored.

Legal basis: our legitimate interest in protecting the website against spam and abuse (Article 6(1)(f) GDPR).

YouTube videos

Some articles include YouTube videos. Until you click “Play”, the page makes no connection to YouTube. Once you click, the video loads from YouTube (Google Ireland Limited) in privacy-enhanced mode, and Google may process your IP address and set cookies in line with its privacy policy. By clicking, you consent to the video being played (Article 6(1)(a) GDPR).

Share buttons and external links

The LinkedIn, Facebook and WhatsApp buttons are plain links – they send no data until you click them. Once you click, you go to that service and its privacy rules apply. The same goes for links to other websites.

3. Cookies

The website does not set cookies or use similar technologies for analytics, advertising or tracking, which is why we do not show a consent banner. Our fonts are stored on our own server – we do not load them from Google or any other company.

In exceptional situations (for example during an attack on the site), Cloudflare may set a technical security cookie (such as “__cf_bm”) that is necessary to tell human visitors from bots. It is not used for tracking and expires after a short time. YouTube cookies are described under “YouTube videos”.

4. Who we share data with

We do not sell your data or share it for marketing. We use trusted service providers who process data on our behalf:

  • Cloudflare, Inc. (USA) – website hosting, protection against attacks, Cloudflare Turnstile, visitor statistics (Cloudflare Web Analytics)
  • Resend, Inc. (USA) – delivering contact form messages to our mailbox
  • cyber_Folks S.A. (Poland) – our email service and storing correspondence

Cloudflare and Resend are based in the USA. Data is transferred outside the European Economic Area on the basis of the European Commission’s adequacy decision on the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission (Articles 45 and 46 GDPR).

5. How long we keep data

  • Contact form messages and correspondence – for as long as needed to deal with your enquiry, and then for no more than 2 years after our last contact, unless keeping them longer is necessary to establish, exercise or defend legal claims.
  • Technical data processed by Cloudflare – for the short period set by Cloudflare’s rules, as needed for security.
  • Visitor statistics – in aggregated form, for up to 6 months.

6. Your rights

You have the right to:

  • access your data and receive a copy (Article 15 GDPR)
  • have your data corrected (Article 16 GDPR)
  • have your data erased (Article 17 GDPR)
  • restrict processing (Article 18 GDPR)
  • data portability (Article 20 GDPR)
  • object to processing based on our legitimate interest (Article 21 GDPR)
  • withdraw your consent at any time, without affecting the lawfulness of processing before you withdrew it

To exercise these rights, email us at hello [at] playdrive.org. We will reply without undue delay and within one month at the latest.

You also have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl). If you live in another EU country, you can contact the data protection authority there.

7. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. The automatic spam protection only blocks messages sent by bots.

8. Children

The website is intended for adults – parents, teachers and organisations. We ask that people under 16 do not send us their personal data through the form without the consent of a parent or guardian.

9. Changes to this policy

If we change how we process data (for example by adding a new tool), we will update this policy and the date at the top, and ask for your consent where required.