Last reviewed: 12 July 2026.
Who is responsible
Michael Koval, a Ukrainian individual entrepreneur (FOP), operates this site (michael-koval.space) and is the data controller for the data described below. Contact: contact@michael-koval.space.
What we collect and why
Forms (newsletter, sample, waitlists, feedback). When you submit a form we store the details you enter — email, optional name, and your answers — together with the form type, submission time, and technical environment. Legal basis: your consent, which you can withdraw at any time by asking us to delete your entry or by using the unsubscribe link in an email. Stored in Airtable (our datastore).
Purchases. Checkout is handled by Creem (creem.io) as merchant of record. Creem collects the data needed to process payment and issue invoices under its own privacy policy. We do not collect or process your payment card data. We may receive order details such as what was bought and the buyer email address so we can support delivery and refunds.
Analytics. We use Vercel Web Analytics, which is cookie-free and does not track you across sites. It gives us aggregated page statistics (views, referrers, country-level location) without building individual profiles.
Anti-abuse. Form submissions are rate-limited using a short-lived, non-persistent record of IP address and email to prevent spam.
Fonts. This site loads Google Fonts from Google servers. Google may receive technical request data such as your IP address, browser, and the page loading the font.
What we don't do
No advertising trackers, no sale of data, no third-party cookies, no automated decision-making, no profiling.
How long we keep data
Form entries: until you ask us to delete them or the related product/newsletter is discontinued. Anti-abuse records are short-lived and non-persistent. Order details we receive from Creem are kept only as long as needed for delivery, support, refunds, and legal/accounting records.
Where data lives
Our providers are Vercel (hosting, analytics), Airtable (form entries), Creem (merchant of record and payment checkout), and Google Fonts (font delivery). Data may be processed in the EU, the US, Ukraine, and other countries where these providers operate, using the safeguards made available by those providers.
Your rights
Under the GDPR and other applicable privacy laws, you can request access, correction, deletion, restriction, or export of your personal data, object to processing, and withdraw consent where processing is based on consent. Write to contact@michael-koval.space — we answer within 30 days. You can also lodge a complaint with your local data protection authority.