Privacy Policy

1. Data controller

The data controller is the entity operating the RealSize.World website. For any matter regarding the protection of personal data, contact us at: contact [at] realsize.world.

2. What data we process

The Service requires no account or personal data and contains no forms that collect such data.

Voluntary payments are handled on external platforms and their payment providers' websites. You do not enter card details on RealSize.World. BuyCoffee shares the supporter's first name, surname, and email address with the creator. Ko-fi shares the display name and email, while the connected payment provider may also share the supporter's legal name and address details. The Service Operator may also receive transaction information, such as the amount and date, and an optional message. The data shared depends on the platform and payment method.

We use Google Analytics 4 to measure traffic. Once enabled, ads are served by Google AdSense. Depending on the active service and your choices, Google may process approximate location, device and browser type, pages visited, referral source, ad impressions and interactions. Analytics and advertising consent are separate. Google Analytics 4 does not store IP addresses.

3. Purposes and legal bases

• Google Analytics cookies are used with your freely given consent (Art. 6(1)(a) GDPR). In advanced Google Consent Mode, cookieless measurement signals may be sent before consent; declining does not prevent all connections to Google.
• Ad personalization and advertising cookies requiring consent (Google AdSense): based on freely given consent (Art. 6(1)(a) GDPR). The available ad type depends on your choices, region and the Google settings described below.
• Ensuring the correct operation and security of the Service — based on the controller's legitimate interest (Art. 6(1)(f) GDPR).
• Handling voluntary payments and related enquiries: performance of the donation agreement (Art. 6(1)(b) GDPR).
• Payment records required by law: compliance with legal obligations (Art. 6(1)(c) GDPR).
• Establishing, exercising, or defending claims related to support: the controller's legitimate interest (Art. 6(1)(f) GDPR).

4. Google services (Analytics, AdSense) and data recipients

We use analytics (Google Analytics 4) and advertising services (Google AdSense) provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland / Google LLC, Mountain View, California, USA). Data may be transferred to Google servers outside the European Economic Area under appropriate safeguards, including Standard Contractual Clauses approved by the European Commission and the EU-US Data Privacy Framework.

Google AdSense ad serving is currently paused. Our own banner collects consent only for analytics cookies in all regions. You can change your choice through Cookie settings in the footer. Google Consent Mode v2 signals default to denied. Google Analytics may send cookieless signals before consent. The AdSense script remains loaded for site integration and verification, but ad requests are paused. Google services may connect before consent.

When making a voluntary donation, the operators of external tipping and payment platforms (such as Coffee Media sp. z o.o. (BuyCoffee), Ko-fi, Stripe, PayPal) act as independent data controllers and process payment data under their own privacy policies.

5. Google AdSense and third-party advertising cookies

Once advertising is enabled, the Service may display ads served by Google AdSense. The following information about advertising and Google’s advertising consent panel applies at that stage. In accordance with Google AdSense program policies and data privacy regulations, we inform you that:

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to users based on their visits to this site and/or other sites on the Internet.
• Users may opt out of personalized advertising at any time. You can manage or disable personalized advertising by visiting Google Ads Settings (https://myadcenter.google.com/ or https://www.google.com/settings/ads).
• You can also opt out of third-party vendors' use of cookies for personalized advertising through industry opt-out tools: European Interactive Digital Advertising Alliance (https://www.youronlinechoices.eu/), Network Advertising Initiative (https://optout.networkadvertising.org/), or Digital Advertising Alliance (https://www.aboutads.info/choices/).
• In the EEA, the United Kingdom and Switzerland, we use Google’s certified consent panel supporting the IAB Europe Transparency and Consent Framework (TCF v2.3). The panel lets you select purposes and partners. Declining personalization may result in non-personalized or limited ads. Non-personalized ads may still require cookie consent. When limited ads are enabled, Google may use cookies and local storage solely to detect invalid traffic, including without personalization consent.

6. Data stored on your device

Our code stores your analytics choice and color theme in localStorage. Google’s panel separately stores privacy decisions and communicates the relevant signals to service providers. Google and advertising partners may use additional cookies or similar technologies in accordance with the purposes and choices described here.

On the “Dig through the Earth” page you can click “My location”. Only then does your browser ask for permission to share your location. We round the position to about 10 km and use it only in your browser to calculate the antipode: we do not store it, send it to any server or add it to the page address. Without asking, this page also reads your device’s time zone (for example Europe/Warsaw) to set an approximate starting point; this information does not leave your browser either.

7. Affiliate links

Affiliate cards in the Service contain ordinary links to external websites. Displaying a card does not run a partner script or store affiliate cookies.

An affiliate link click may be measured by Google Analytics as an interaction, under the analytics practices described in this policy. Our event contains the partner and offer identifiers, the page containing the card and its visual variant. We do not include the full affiliate URL or referral identifier in this event.

After you click a link, the seller or affiliate programme provider may process technical connection data and a referral identifier and use its own measurement technologies to attribute a purchase to the referral. Their privacy policies and consent mechanisms describe processing on those external websites. RealSize.World cookie settings do not manage consent on partner websites.

8. Retention period

Analytics data retention depends on the Google Analytics configuration. Advertising cookie lifetimes vary by cookie and region: for example, IDE lasts up to 13 months in the EEA, the United Kingdom and Switzerland, and up to 24 months elsewhere; DSID lasts up to 2 weeks. See our Cookie Policy for details. Local preferences remain until deleted.

Support-related data is kept for the time needed to handle the payment, then for the period required by applicable record-keeping rules and, where necessary, until the limitation periods for related claims expire.

9. Your rights

In connection with the processing of your data, you have the following rights:

• the right to access your data and obtain a copy,
• the right to rectification, erasure, or restriction of processing,
• the right to object to processing and the right to data portability,
• the right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal) — you can do this via “Cookie settings” in the footer,
• the right to lodge a complaint with a supervisory authority (in Poland: the President of the Personal Data Protection Office, PUODO).

10. Privacy in the United States

In US states covered by applicable regulations, Google’s panel provides a “Do Not Sell or Share” link to opt out of the sale or sharing of data for targeted advertising. Advertising opt-outs are separate from analytics consent. Google handles Global Privacy Control (GPC) signals in the regions where it supports this mechanism.

Rights to access, delete or correct data and opt out of particular uses depend on applicable law. For data processed by the Service Operator, use the contact details in this policy.

11. Children

The Service is not directed at children and does not knowingly collect their data. Consent to analytics and advertising cookies should be given by a person aged 16 or older.

12. Policy changes and contact

This Policy may be updated. The current version, together with its date, is always available on this page.

Privacy contact: contact [at] realsize.world.