Last updated · 2026-04-30
Privacy Notice
This notice explains how SapioManiac, LLC ("SapioManiac", "we", "us") processes personal data when you visit this website. We try to keep it short, plain, and free of dark patterns.
1. Who is responsible
The data controller within the meaning of Art. 4(7) GDPR is:
SapioManiac, LLC30 N Gould St., Ste R
Sheridan, WY 82801, United States
Email: privacy@sapiomaniac.com
We have not appointed a Data Protection Officer because we are not legally required to under Art. 37 GDPR. For any data-protection question, write to the email above and the request will reach the right person.
2. What we collect, why, and on what legal basis
We try to collect as little as possible. The table below covers every category of personal data this site processes.
| Purpose | Data | Legal basis | Retention | Processor |
|---|---|---|---|---|
| Hosting & delivery | IP address (transient, request log), user agent, referring URL | Art. 6(1)(f) GDPR — legitimate interest (operating the site, security, abuse prevention). | Server logs are kept up to 30 days, then aggregated or deleted. | Vercel Inc. (hosting) |
| Privacy-friendly product analytics | Pseudonymous usage events (page views, page-leave), approximate region (city level), browser+OS class, referrer | Art. 6(1)(a) GDPR — your explicit consent via the banner. You can withdraw consent at any time. | Up to 12 months in PostHog, then deleted. | PostHog Inc. (US-hosted by default) |
| Aggregate web analytics | Pseudonymous page-view counts, performance metrics | Art. 6(1)(a) GDPR — consent. | Up to 12 months in Vercel Analytics. | Vercel Inc. |
| Email correspondence | Anything you put in an email to us (name, message, attachments) | Art. 6(1)(b)/(f) GDPR — to reply to your enquiry / legitimate interest. | Kept for the duration of the engagement plus 24 months, then deleted (unless we are required to keep a record for longer for legal or accounting reasons). | Proton Mail (Proton AG, Switzerland) |
3. Cookies & similar technologies
No analytics tools fire and no cookies are written until you click Accept on the banner. If you click Decline, we record only your decline (in your browser's localStorage — never sent to a server) so we don't bother you again. The full list of identifiers we may set, once consent is given, is:
| Name | Provider | Purpose | Duration |
|---|---|---|---|
ph_* | PostHog | Distinguish anonymous sessions | 1 year |
_vercel_* | Vercel | Aggregate page-view counts | Up to 1 year |
sapiomaniac-cookie-consent | First-party (this site) | Remember your accept / decline choice so we don't re-prompt | Until cleared (localStorage, not a cookie) |
You can withdraw consent at any time by clearing thesapiomaniac-cookie-consent entry in your browser's site data — the banner will reappear on the next visit.
4. Where data goes (international transfers)
PostHog is operated from the United States by default. When you consent to analytics, pseudonymous events are transferred to the US. PostHog Inc. is bound by the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. If you would like the EU host instead, contact us at privacy@sapiomaniac.com.
Vercel processes data on EU and US infrastructure. Vercel is self-certified under the EU-US Data Privacy Framework and uses SCCs for transfers outside the EEA.
5. Your rights
Under GDPR you have the right to:
- access (Art. 15) the data we hold about you,
- rectify (Art. 16) inaccurate data,
- erase (Art. 17) data — "the right to be forgotten",
- restrict (Art. 18) processing in certain situations,
- data portability (Art. 20),
- object (Art. 21) to processing based on legitimate interest,
- withdraw consent at any time without affecting prior processing,
- complain to a supervisory authority (Art. 77) — visitors in the EU may complain to the data-protection authority of their member state of residence (a list is at edpb.europa.eu).
To exercise any of these, email privacy@sapiomaniac.com. We respond within 30 days (Art. 12(3) GDPR).
6. Talent profiles
The /talent section publishes the names, photographs, role titles, and biographies of contributors who have signed a release authorising their inclusion. If you are a contributor and would like your profile updated or removed, email privacy@sapiomaniac.com. We act on these requests within 7 working days.
7. Children
This site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it.
8. Security
All traffic is served over HTTPS. Analytics keys are project-scoped and contain no privileged access. Source code is kept in a private repository. We do not sell or rent personal data, and we do not run cross-site advertising trackers.
9. Changes to this notice
We may update this notice as the site evolves (e.g. new processors, new pages). The 2026-04-30 timestamp at the top of the page reflects the last review. Material changes will be announced via the cookie banner re-prompting on next visit.