Privacy Policy

Last updated: 7 August 2026

1. Overview

This website (alexeyborealis.com) is a static marketing and content site for Alexey Borealis, an independent predictive astrologer. It has no user accounts, no database and no server-side session storage. The only personal data collected is what you voluntarily submit through the contact form, plus the limited analytics and advertising cookies described in the Cookie Policy.

2. Data we collect

2.1 Contact form

When you submit the contact form, the following data is collected:

• Name — how to address you.
• Email address — used only to reply to your enquiry.
• Topic — the category you select (consultation, training, software, research, publication, other).
• Message — the free-text description of your request.

The form is protected against automated abuse by a honeypot field and Cloudflare Turnstile. Submission is processed by a Cloudflare Worker that forwards your message by email to the site owner. If the form cannot be submitted automatically, your mail client is opened with a draft as a fallback.

2.2 Technical data

The Cloudflare Worker receives your IP address (used only for the optional Turnstile verification) and the origin of the request. These are not stored beyond the moment of sending the email. A separate Worker endpoint (/api/admin-filter) compares the request IP against the site owner's own known IP addresses and, on a match, sets a functional cookie (ab-admin) so the owner's own visits are kept out of analytics; this cookie carries no personal identifier and is never used to track visitors.

2.3 Cookies

Strictly-necessary storage (your consent choice) and optional analytics/marketing cookies are described in the Cookie Policy. Google Analytics 4 loads in a cookieless mode before you consent — it sends privacy-preserving pings that store no identifiers on your device; analytics and advertising cookies are set only after you consent. Facebook Pixel and any Google Ads tags load only after you consent to marketing.

3. Purpose and legal basis

• Replying to your enquiry — your name, email, topic and message are used solely to answer your request. Legal basis: your consent at the moment of submission (GDPR Art. 6(1)(a)) and, where applicable, the legitimate interest of responding to a request you initiated (Art. 6(1)(f)).
• Abuse prevention — the honeypot field and Turnstile token are used to detect and block automated spam. Legal basis: legitimate interest in protecting the service (Art. 6(1)(f)).
• Privacy-preserving measurement (cookieless pings) — before you choose, Google Consent Mode v2 sends cookieless pings to Google so the site can measure basic, anonymous visit and ad-click statistics without storing any identifier on your device. No cookies are set and no cross-site identifier is written until you consent. Legal basis: legitimate interest in measuring site performance and ad attribution without identifying you (GDPR Art. 6(1)(f)); the pings carry no persistent identifier, and you can prevent even these by blocking Google's scripts in your browser.

4. Third parties

Your data is not sold or shared for commercial purposes. The following processors handle limited data only to deliver the form and the site:

• The site owner's email provider — the contact form is sent by a Cloudflare Worker that connects directly to the site owner's own SMTP mail server (the server hosting the contact@alexeyborealis.com mailbox) over an encrypted TLS connection and delivers your message into that mailbox. There is no third-party email API or mass-mailing service in the chain; the message travels from the Worker to the owner's already-authorized business mailbox. The mailbox is hosted by the owner's email hosting provider, which acts as a processor for delivery.
• Cloudflare — runs the Worker that receives the form submission and provides the optional Turnstile anti-bot check. See Cloudflare's privacy policy.
• Google (Analytics 4, Ads) and Meta (Pixel) — Google Analytics 4 loads in a cookieless mode before you consent (privacy-preserving pings, no identifiers stored); analytics and advertising cookies are set only after you consent. Facebook Pixel loads only after you consent to marketing. See the Cookie Policy for details.

5. Retention

Form submissions are delivered by email to the site owner's business mailbox and are retained there for as long as needed to answer your enquiry and, where relevant, for the duration of an ongoing professional relationship. You may request deletion at any time (see Your rights). Technical data from the Worker is not persisted.

6. Your rights

Under the GDPR and similar regulations you have the right to:

• Access the personal data held about you;
• Request correction of inaccurate data;
• Request deletion of your data ("right to be forgotten");
• Object to or restrict processing;
• Withdraw consent at any time (including cookie consent — see the footer "Cookie settings" link);
• Lodge a complaint with your supervisory data-protection authority.

To exercise any of these rights, write to the address in section 8.

7. International transfers

Cloudflare, Google and Meta may process data outside the EU/EEA. Cloudflare, Google and Meta each participate in the EU-US Data Privacy Framework (DPF) and, where the DPF does not apply, rely on Standard Contractual Clauses or other appropriate safeguards. The site owner's email provider may also process data outside the EU/EEA and relies on appropriate safeguards where required. See the linked policies in section 4.

8. Contact

For any privacy-related question or request, contact Alexey Borealis via the contact page or by email. The controller of your data is Alexey Borealis, operating from Poland.

9. Changes

This policy may be updated to reflect changes in the site or the law. The "Last updated" date above indicates the most recent revision.