Who is responsible for your data
The data controller is Toxicle Studio Michał Karpiński, NIP (VAT ID): 6932147940. For anything about your data, write to support@toxiclestudio.pl.
What we collect and why
Contact form and e-mail: your e-mail address and message — so we can reply. Legal basis: our legitimate interest in corresponding with you (Art. 6(1)(f) GDPR).
Security: your IP address is processed as a fingerprint to block bots and attacks on the contact form (Art. 6(1)(f) GDPR).
Server logs: the hosting company's server records technical connection data, such as your IP address and the time of your visit. They are needed for security and troubleshooting — we don't use them for anything else.
Providing data is voluntary, but without an e-mail address we can't reply to your message.
What we don't do
We don't use cookies, analytics, ad pixels or third-party fonts. The site doesn't connect to any third-party servers. Your browser stores only your sound setting — it stays on your device.
We don't build profiles, we don't make automated decisions about you, and we don't transfer data outside the European Economic Area.
How long we keep data
Correspondence: up to 14 days after the last message in a conversation — after that the mailboxes clean themselves automatically. We keep messages longer only when the law requires it (e.g. accounting documents) or when they are needed to establish, exercise or defend legal claims — and only for as long as necessary.
IP fingerprints used to stop bots are deleted within 24 hours at the latest.
Website error logs (no e-mail addresses or message contents) are deleted automatically after 14 days.
Who we share data with
We never sell your data. The website and e-mail are hosted by SEOHOST Sp. z o.o. of Poznań, Poland, which processes data only on our instructions, under a data processing agreement.
Your rights
You have the right to access, rectify and erase your data, to restrict its processing and to object — to the extent provided by the GDPR. Just write to support@toxiclestudio.pl.
You can also lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).
Last updated: 19 October 2026
