Skip to main content
YORDAN IVANOV

Privacy Policy

Last updated: October 2026

This policy explains what data is collected through this website, how it's used, and your rights regarding that data.

Data Controller

Yordan Ivanov is the data controller for information collected through this website. For any privacy-related enquiries, contact: [email protected]

Cookie Consent

This website uses a cookie consent banner that appears on your first visit. You can choose to:

  • Accept all cookies – enables analytics and marketing cookies
  • Accept essential only – only functional cookies required for the site to work
  • Customise – choose specific cookie categories

You can change your preferences at any time by clearing your browser cookies and revisiting the site. Your consent choice is stored locally in your browser.

Analytics Data

If you consent to analytics cookies, the following data is collected via Google Analytics:

  • Pages visited and time spent
  • Referring website
  • Browser type, device, and screen resolution
  • Approximate location (country/city level)
  • Interactions such as button clicks, form submissions, and external link clicks

This data is anonymised and used to understand how visitors use the site and improve content. Google Analytics may set cookies including _ga and _gid. For more information, see Google's Privacy Policy.

Newsletter Subscription

When you subscribe to the newsletter, the following data is collected and stored in Substack and SendFox:

  • Email address
  • Subscription date
  • Subscription status (confirmed/unsubscribed)

Your email is used solely to send newsletter content and occasional updates. You can unsubscribe at any time via the link in any email. No double opt-in is required – your subscription is confirmed immediately.

AI Digital Twin Interactions

When you ask a question to the AI assistant on this site, the following data is logged:

  • Your question
  • The AI's response
  • Whether relevant knowledge was found
  • Your IP address (for rate limiting and abuse prevention)
  • Your country (derived from IP via Cloudflare)
  • Timestamp

This data is stored in a Cloudflare D1 database and is used to:

  • Improve the AI assistant's responses
  • Monitor for abuse
  • Understand what topics visitors are interested in

Questions are limited to 10 per visitor to prevent abuse.

Error Tracking

This site uses Sentry for error monitoring. When an error occurs, the following may be collected:

  • Error details and stack trace
  • Browser and device information
  • IP address
  • Page URL where the error occurred

This data is used solely to identify and fix bugs. See Sentry's Privacy Policy.

Session Booking

If you book a coaching session, you'll be redirected to TidyCal, a third-party scheduling service. TidyCal collects your name, email, and any information you provide in the booking form. See TidyCal's Privacy Policy for details.

Bot Protection

This site uses honeypot fields in forms to detect automated submissions. No personal data is collected through this mechanism – it simply checks if a hidden field was filled (which humans wouldn't see but bots might).

Data Retention

  • Analytics data: Retained according to Google Analytics default settings (14 months)
  • Newsletter data: Retained until you unsubscribe, then deleted
  • AI interaction logs: Retained indefinitely for service improvement
  • Error logs: Retained according to Sentry's default settings (90 days)

Your Rights (GDPR)

Under EU data protection law, you have the right to:

  • Access – Request a copy of your personal data
  • Rectification – Request correction of inaccurate data
  • Erasure – Request deletion of your data ("right to be forgotten")
  • Restriction – Request limited processing of your data
  • Portability – Receive your data in a portable format
  • Object – Object to processing based on legitimate interests

To exercise any of these rights, contact: [email protected]

Third-Party Services

This site uses the following third-party services:

  • Cloudflare – Hosting, CDN, and Workers (US-based, EU-US Data Privacy Framework certified)
  • Google Analytics – Website analytics (US-based)
  • Substack – Newsletter subscriptions (US-based)
  • SendFox – Email sequences
  • TidyCal – Session booking (US-based)
  • Sentry – Error tracking (US-based)
  • Google Gemini – AI responses (US-based)

Changes to This Policy

This policy may be updated from time to time. Significant changes will be noted at the top of this page with the date of the last update.