Consent first. Useful measurement without hidden tracking.

Controller and scope

Tipidler determines how this website is operated and is the controller for personal data processed directly through the catalog. The portfolio represents books published under the pen name Marcin P. Matysek.

Privacy contact: mar(at)tipidler(.)com.

This policy applies to https://tipidler.com. Amazon and other external websites are separate controllers for their own services and publish their own privacy notices.

Privacy-by-design baseline

The catalog does not require an account and does not operate an onsite checkout, shopping cart, comment system, upload feature, newsletter form, or customer database. We do not ask for payment-card information, postal addresses, passwords, or downloadable book files.

We do not send names, email addresses, telephone numbers, Amazon order details, payment data, or a Tipidler user ID to Google or Meta. Enhanced conversions and Meta advanced matching are disabled in the current configuration.

Data that may be processed

Hosting and security data

When you request a page or image, hosting and network infrastructure may process IP address, date and time, requested URL, response status, browser and device information, referrer, and diagnostic or security events. These records support delivery, availability, error investigation, abuse prevention, and service security.

Catalog search data

A search term entered on the collection page is sent in the requested URL so the server can filter books. The application does not create a dedicated search-history database. If analytics consent is granted, only a short, validated search phrase that does not resemble an email address, URL, or long number is sent to Google Analytics with the result count.

Consented measurement data

Depending on your choices, measurement may include page URL and title, referrer, consent state, approximate location derived by the provider, browser and device characteristics, campaign or ad-click identifiers, viewed book ID and slug, collection page, preview role, gallery actions, scroll milestones, and clicks from Tipidler to Amazon.

Messages you choose to send

If you contact us by email, we receive the address and content you provide. Do not send payment information or unnecessary sensitive data.

Purposes and legal bases

• Website delivery, security, and diagnostics: legitimate interests in operating a reliable catalog, preventing misuse, and establishing or defending legal claims.
• Analytics: your consent, used to understand discovery, page use, searches, product interest, and preview engagement.
• Advertising measurement and personalization: your separate advertising consent, used for campaign attribution, remarketing signals, audience measurement, and advertising optimization.
• Voluntary correspondence: steps requested by you, legitimate interests in business communication, consent where applicable, or legal obligations.

Non-essential storage and tags are not treated as necessary merely because they help the business. Refusing them does not restrict the catalog, gallery, search, or Amazon links.

Consent controls and Google Consent Mode v2

The site uses a basic consent implementation. Google Analytics, Google Ads, and Meta Pixel scripts are not requested from their providers before you make a choice. Analytics and Advertising are separate optional categories. Rejecting all optional categories takes one click, just like accepting all.

When a Google category is enabled, the site communicates the relevant Consent Mode v2 states, including analytics_storage, ad_storage, ad_user_data, and ad_personalization. Advertising data redaction is enabled. If your browser sends a Global Privacy Control signal, the Advertising category is kept disabled.

Google Analytics 4

With Analytics consent, Google Analytics 4 measures page views and selected interactions. The implementation uses recommended ecommerce-style events where appropriate, including view_item_list, select_item, view_item, and search, plus purpose-specific events for gallery use, image zoom, content milestones, 404 errors, consent updates, and Amazon outbound clicks.

Event-scoped definitions may include page type, site section, product ID, product slug, product topic, collection page, CTA location, preview role and index, Amazon ASIN, consent categories, and search result count. These fields describe website content and interactions, not a named Tipidler customer.

Google may process technical identifiers and derive device, traffic-source, and approximate geographic information under its terms. Review Google's Privacy Policy.

Google Ads, Meta Pixel, and advertising

With Advertising consent, Google Ads tags and Meta Pixel may measure ad-driven visits, viewed products, campaign attribution, and clicks to Amazon. The providers may use cookies or similar identifiers to measure frequency, build or match audiences, limit repeated ads, attribute results, and personalize advertising according to their settings and policies.

Meta events currently include PageView, ViewContent, consented catalog Search, and the custom AmazonOutboundClick event. No Purchase event is generated because Amazon does not provide completed order data to this website. The GA4 amazon_outbound_click key event is shared with the linked Google Ads account as a secondary observation; direct Google Ads conversion-tag firing remains disabled until a dedicated destination is configured.

Learn more in Google's business-data privacy information and Meta's Privacy Policy.

Advertising providers may perform limited profiling for attribution, audience creation, or personalized advertising after consent. Tipidler does not use this portfolio to make decisions that produce legal or similarly significant effects about visitors.

Cookie and browser-storage register

Exact provider names and durations may change as provider technology evolves. Optional provider storage appears only for categories you enable.

Browsers also let you inspect, block, or delete cookies. Blocking strictly necessary preference storage may cause the banner to ask again.

Recipients and external retailers

Technical data may be processed by hosting, network, security, backup, analytics, advertising, or email providers acting under their applicable roles and terms. Data may also be disclosed when required by law, to protect rights and security, or in a lawful business reorganization.

Clicking a verified Amazon link directs your browser to Amazon. Amazon then receives the request and may process it under its own privacy notice. Tipidler does not receive your Amazon password, payment details, order history, shipping address, or payment-card data.

International data transfers

Google and Meta operate internationally and may process consented data in the United States or other countries. Where applicable, providers may rely on adequacy decisions, certification frameworks, standard contractual clauses, or other lawful safeguards described in their documentation. Hosting and email providers may also use international infrastructure.

Retention and security

The consent preference is retained for 180 days unless you change it or delete browser storage. Google Analytics event and user data retention is configured for 14 months where the setting applies. Aggregated reports, provider advertising records, and data required for security, billing, legal compliance, or fraud prevention may follow different provider or statutory periods.

Technical server logs are retained only as reasonably necessary for security, diagnostics, hosting operations, and legal requirements, then deleted or rotated under infrastructure settings. Voluntary correspondence is kept only while needed to respond, maintain necessary records, resolve disputes, or comply with law.

Reasonable technical and organizational safeguards are used to reduce unauthorized access, alteration, disclosure, or loss. No internet service can guarantee absolute security.

Your privacy rights

Depending on your location and applicable law, you may request access, correction, deletion, restriction, objection, or portability of personal data; withdraw consent at any time; or object to direct marketing and certain profiling. You may also lodge a complaint with the competent data-protection authority.

To make a request, email mar(at)tipidler(.)com and describe it. We may request proportionate information to verify identity and prevent unauthorized disclosure. Rights can be subject to lawful exceptions.

Children's privacy

The catalog is intended for a general audience and is not designed to knowingly collect personal data from children through accounts, forms, comments, or direct sales. A parent or guardian who believes a child has provided personal data may contact us for review and deletion.

Changes to this notice

We may revise this policy when functionality, providers, advertising practices, retailer integrations, or legal requirements change. The effective date and version identify the current notice. A new consent decision is requested when the consent-policy version changes materially.