§ 1. Introduction
This Privacy Policy describes how SparkSome Venture Sp. z o.o., with its registered office at Szlak 77/222, 31-153 Kraków, Poland, entered in the National Court Register (KRS) maintained by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division, under KRS number 0001085500, NIP 6793289948, REGON 527616291 ("we", "us", "our"), processes personal data in connection with the Galactropy service available at galactropy.com — an open-source physical entropy generator based on real radio noise.
§ 2. Data controller
The data controller is SparkSome Venture Sp. z o.o., based in Kraków. For any questions about how personal data is processed in connection with Galactropy, please write to entropy@sparksome.pl.
§ 3. What data we collect
Galactropy is a public entropy generator and API — it does not require creating an account or signing in. In connection with using the service, we may collect:
- your IP address, stored in server logs for security and abuse-prevention purposes (rate limiting);
- data collected via Google Analytics for traffic analysis — only after consent given through the cookie-management banner (Cookieyes);
- technical parameters of requests to the public API (e.g. requested data size, endpoint used) — solely to keep the service stable and protect it from abuse; API requests are not linked to any account or user identity.
The service does not offer contact forms, a newsletter, or account registration — the only way to reach us is the email address or phone number listed on the site.
§ 4. Email and phone contact
If you contact us via the email address or phone number listed on the site (for example about production integration, deployment, or technical collaboration), we process the data you provide this way (email address, message content, and any name or phone number you include) solely to respond to and handle your inquiry, based on our legitimate interest as data controller (Art. 6(1)(f) GDPR).
§ 5. Purposes of processing
- Analyzing site traffic and optimizing the service (Google Analytics) — based on consent given through the cookie-management banner (Art. 6(1)(a) GDPR).
- Managing infrastructure security, protecting against abuse and attacks, and enforcing request rate limits — based on our legitimate interest as data controller (Art. 6(1)(f) GDPR).
- Responding to messages sent by email or phone — based on our legitimate interest as data controller (Art. 6(1)(f) GDPR).
§ 6. Cookies
The service uses the following cookies:
- Necessary — required for the consent-management mechanism (Cookieyes) to work correctly; these do not require consent.
- Analytics — Google Analytics; used only after consent is given through the cookie banner shown on first visit.
Consent can be withdrawn at any time by changing your settings in the cookie-management panel available on the site, or in your browser settings.
§ 7. Data sharing and international transfers
Data collected via Google Analytics may be processed by Google LLC on servers located outside the European Economic Area, including in the United States. This transfer relies on standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR).
The service does not use any other third-party analytics, marketing, or security tools that process personal data — in particular, we do not use Cloudflare Turnstile, Microsoft Clarity, or any newsletter-sending tool.
§ 8. Data retention periods
- Server logs (IP addresses) — kept for as long as necessary to secure the infrastructure.
- Data processed via Google Analytics — according to the retention settings configured in the tool (14 months by default).
- Email/phone correspondence — until your inquiry has been resolved, and afterwards for as long as needed to defend against potential claims.
§ 9. Data security
Connections to the service are encrypted (HTTPS/SSL). The public Galactropy API does not require authentication or the submission of personal data, and the data it returns (random bytes) is never linked to a user's identity in any way.
§ 10. Your rights
Under the GDPR, you have the right to:
- access your personal data;
- rectify, erase, or restrict the processing of your data;
- object to processing;
- data portability;
- withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal;
- lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland, email: kancelaria@uodo.gov.pl).
To exercise the rights above, please contact us at entropy@sparksome.pl.
§ 11. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect changes in our data-processing practices or in applicable law. The current version is always available at galactropy.com/privacy.
§ 12. Contact
If you have any questions about this Privacy Policy, please contact us at entropy@sparksome.pl.