Privacy Policy
Last updated: March 9, 2026
I'm Elias Witt, the founder and operator of Birbol. I take your privacy seriously — it's one of the reasons I built Birbol using self-hosted, open-source tools instead of renting from big SaaS platforms.
This policy explains what data I collect, why I collect it, and what rights you have over it.
What I Collect
Contact form submissions. When you fill out a form on this site, I collect whatever information you provide — typically your name, email, and message. This is stored in my self-hosted CRM (Twenty) on infrastructure I control.
Booking information. When you schedule a discovery call through Cal.com, I receive your name, email, and any notes you include. Cal.com processes this data on their servers — see their privacy policy.
Analytics data. I use PostHog for privacy-focused analytics. PostHog collects anonymized usage data such as pages visited, referral source, browser type, and approximate location (country/region level). I do not track individual users unless you identify yourself (e.g., by submitting a form).
Server logs. Cloudflare, which provides CDN and security services for this site, may collect IP addresses, request headers, and other technical data as part of their standard operation. See Cloudflare's privacy policy.
What I Don't Collect
- No third-party advertising cookies or tracking pixels
- No selling or sharing of your data with advertisers
- No cross-site tracking or fingerprinting
- No data broker relationships of any kind
Cookies
This site uses minimal cookies:
- PostHog analytics — A first-party cookie to track anonymous session data. No personal information is stored in this cookie.
- Theme preference — A local storage entry to remember your light/dark mode choice.
- Cloudflare — Security cookies used for bot detection and DDoS protection.
I do not use any third-party advertising or social media cookies.
Third-Party Services
I use the following third-party services in operating this site:
| Service | Purpose |
|---|---|
| Cloudflare | CDN, DNS, DDoS protection |
| PostHog | Privacy-focused analytics |
| Cal.com | Appointment scheduling |
| Hetzner | Server hosting (EU/US) |
How I Use Your Data
- To respond to your inquiries and provide the services you've requested
- To schedule and manage appointments
- To understand how visitors use this site so I can improve it
- To protect this site from abuse and security threats
Data Retention
Contact form data and CRM records are retained for as long as the business relationship is active, or until you request deletion. Analytics data is retained for 12 months and then automatically purged.
Your Rights
Regardless of where you're located, I respect the following rights:
- Access — You can request a copy of all data I hold about you.
- Correction — You can ask me to correct inaccurate data.
- Deletion — You can ask me to delete your data entirely.
- Portability — You can request your data in a machine-readable format.
- Opt out — You can opt out of analytics tracking by using a browser extension like uBlock Origin or enabling Do Not Track.
For CCPA purposes: I do not sell your personal information. I do not share your personal information for cross-context behavioral advertising.
For GDPR purposes: The legal basis for processing your data is legitimate interest (site analytics) and consent (form submissions and booking).
Children's Privacy
This site and its services are not directed at children under 13. I do not knowingly collect personal information from children.
Changes to This Policy
I may update this policy from time to time. Material changes will be noted with an updated "Last updated" date at the top of this page.
Contact
If you have questions about this privacy policy or want to exercise your data rights, reach out: