Who is responsible for your data
The controller of your personal data is JG INVEST P.S.A. (a Polish simple joint-stock company), ul. Jana Matejki 2, 32-600 Oświęcim, Poland, KRS 0000915798, NIP (tax ID) 5492463888, REGON 389702924. Contact: hello@mainstreetradar.com. Because the publisher is established in the European Union, the EU General Data Protection Regulation (GDPR) applies to everything we do with personal data, wherever you live.
What we collect and why
| Data | Purpose | Legal basis | How long |
|---|---|---|---|
| Your email address, the consent text you agreed to, the date and the page you signed up on | Sending The Radar newsletter, proving consent | Consent (Article 6(1)(a) GDPR) | Until you unsubscribe, then the consent record for up to 3 years as evidence |
| Server logs: IP address, browser, pages requested, time | Keeping the site secure and working; counting visits as daily totals (no IP addresses kept in the totals) | Legitimate interests (Article 6(1)(f)) | Rotated by the hosting server, normally within weeks |
| Bonus reminders: your email address, the offer, the days before its end you chose, the consent text and date | Emailing you before a bonus you picked ends | Consent (Article 6(1)(a)) | Unconfirmed requests: 7 days. Sent or expired reminders: 30 days. You can cancel any time from the link in each email |
| Comments: what you write, the name you give (optional; we show “Reader” if you leave it empty), the page and the time; your email address only if you enter it; a keyed one-way hash of your IP address, never the address itself | Publishing the discussion under our guides, answering questions, keeping out spam and abuse; the email only to send the reply notifications you ask for and to recognize a returning commenter when we moderate | Legitimate interests (Article 6(1)(f)) in running a useful discussion; reply notifications: consent (Article 6(1)(a)) | Comments: until you ask us to remove them, or we remove them under our discussion rules. IP hash: 180 days, then erased. Spam: deleted after 30 days. Reply notifications: until you unsubscribe; unconfirmed addresses are deleted after 14 days |
| Connected apps (AI assistants you authorize to manage your reminders): your email, the app’s name, the permission you granted; access codes are stored only as one-way hashes | Letting an app you chose read and change your own reminders | Contract (Article 6(1)(b)), at your request | Until you disconnect the app on the “Your connected apps” page; inactive sign-ins expire after 30 days, every sign-in after 90 days |
| Messages you email us | Replying to you | Legitimate interests | Up to 2 years after the conversation ends |
Comments. You can comment without giving a name or an email address. If you give a name, it is shown with your comment; your email address is never shown and is used only if you tick “Email me when someone replies”: we then send one email asking you to confirm the address, and after that a notification when someone replies, each with a one-click unsubscribe link. It is not a newsletter sign-up and we do not use it for marketing. We do not store your IP address with a comment, only a keyed one-way hash of it, which lets us stop floods and repeated spam and is erased after 180 days. We do not use Gravatar or comment cookies. If you post, your browser keeps the name and email you typed in its own local storage, on your device only, so the form is filled in next time. “Helpful” votes and reports are counted with a hash of your IP address and browser made with a key that changes every day, so they cannot be linked from one day to the next. Comments without an email address, and the first comment from each address, are checked by hand before they appear. To have your comment corrected or removed, email hello@mainstreetradar.com.
With your consent (cookie banner), we use Google Analytics 4 to measure which pages and bonuses are useful: pages viewed, clicks on bank links, approximate location and device type. Google Signals and advertising features are switched off. See Cookies.
Without cookies and without your consent, we also count visits without identifying you. When a page loads, our script asks our own server for two tiny files: /msr-hit.txt (once per page view) and /msr-ev.txt (when you scroll through a page, see or click an offer, sign up for The Radar, ask for a reminder, make a cookie choice, or when the page hits a script error). These requests carry only the event, a rounded value and the page address. They contain no identifier, store nothing on your device and are not shared with anyone. Every 30 minutes a script on our server turns the logs into daily totals per page, without IP addresses or browser details, and only these totals are kept. You can object at any time by emailing us.
We do not sell or share your personal information
We do not sell personal information, do not share it for cross-context behavioral advertising, and use no advertising cookies. This is our notice for the California Consumer Privacy Act and similar US state laws: the categories we collect are listed in the table above, and you can ask us what we hold about you, ask us to correct or delete it, and we will not treat you differently for asking.
Who processes it for us
- Hosting: Aderlo Cloud (ADERLO PSA, Poland), on servers operated by Hetzner Online GmbH in Germany.
- Email delivery: Twilio SendGrid (Twilio Inc., USA) sends confirmation emails, the newsletter and comment reply notifications, under the EU–US Data Privacy Framework.
- Mailing list: NetSendo, run by us on Google Cloud infrastructure, holds confirmed subscribers.
- Analytics (only with consent): Google Analytics 4, Google Ireland Limited.
Sign-ups that are not confirmed within 7 days are deleted. We do not knowingly collect data from children under 13.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to processing based on legitimate interests, and withdraw consent at any time (for the newsletter, use the unsubscribe link or email us). You can complain to the Polish data protection authority, the President of the Personal Data Protection Office (uodo.gov.pl), or to the authority where you live.