Privacy and cookies
Effective from 2 November 2026
Who we are
arroway.cz is operated by Filip Šeřík, a self-employed sole trader, Company ID (IČO) 07763506, Ovenecká 871/13, 170 00 Praha 7 – Holešovice, Czech Republic. He is the controller of personal data.
Contact: yo@filip.wtf.
The Range Tracker app (rangetracker.arroway.cz) has its own Privacy Policy. This English text is a translation. The Czech version is the one we publish as primary.
What we process, and why
1. Visiting the site. We process your IP address, browser data and technical logs to run and secure the site, on the basis of legitimate interest. Vercel keeps those logs for its own operations period. We do not extend it.
2. A teambuilding enquiry. If you send the form, we process your name, company, email and phone, group size, length, dates and note, the page you sent it from, the browser type, and a shortened hash of the IP address for spam protection.
We use this only to handle the enquiry and prepare an offer. That is a step before a contract, under Art. 6(1)(b) GDPR. The enquiry is stored in Supabase and emailed to yo@filip.wtf via Resend. The checkbox confirms that you have read this notice. Consent is not the legal basis.
We do not keep an enquiry for longer than 2 years after the last contact. If it becomes an accounting record, we keep that record for as long as accounting and tax law requires.
3. Analytics (Google Analytics 4). With your consent we measure visits: pages, approximate location, device and a pseudonymous identifier. The cookies are _ga and _ga_BY02NC28Z9, for up to 2 years. The provider is Google Ireland Ltd. and data may be transferred to the USA under the EU–US Data Privacy Framework. The script loads only after consent. Until then, Google Consent Mode v2 has analytics and ads denied.
4. Site administration. Signing in to the editorial system uses necessary Supabase cookies (sb-…). That applies only to content editors.
Cookies
| Cookie or storage | Purpose | Type | Duration |
|---|---|---|---|
ay_cookie_consent_v1 (localStorage) | remembers your choice | necessary | 12 months |
sb-… (administration only) | editor sign-in | necessary | session |
_ga, _ga_BY02NC28Z9 | Google Analytics 4 | analytics, consent only | up to 2 years |
You can change or withdraw consent with “Cookie settings” in the footer, or by clearing cookies and site data in your browser. We ask again after 12 months.
Who receives data
| Recipient | Role |
|---|---|
| Vercel Inc. | hosting |
| Supabase | enquiry database and editor sign-in |
| Resend | delivery of the enquiry email |
| analytics, consent only |
Some of them are in the USA. Transfers are covered by standard contractual clauses or the EU–US Data Privacy Framework. We do not sell data.
Your rights
You have the right to access your data, to rectification, erasure, restriction, portability, to object, and to withdraw consent.
Email yo@filip.wtf. You can also complain to the Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz).