Privacy

The short version

This site has no accounts, sets no cookies, and runs no analytics. Nobody is counting you, profiling you or selling anything about you. If you never place a bid, nothing about you is stored anywhere except in the ordinary access logs every web server keeps.

Who is responsible

Grid Space is run by Jeremi Napierała, the data controller for anything described here. Contact: bobikomo@gmail.com.

Cookies, and what is stored in your browser

This site sets no cookies. Not for advertising, not for analytics, not for anything. There are no third-party scripts, no tracking pixels and no embedded players. The typeface is served from this site’s own domain, bundled in when the page is built, so loading the page does not tell Google or anyone else that you visited.

One single thing is ever stored on your device, and only if you ask for it: if you click the currency switch at the top of the page, your choice is kept in your browser’s session storage under the key gridspace.currency, holding one of three values — EUR, USD or PLN. Visit without touching that switch and nothing at all is written. It is never sent to the server, it identifies nobody, and it is gone the moment you close the tab — session storage does not survive it.

That is why there is no consent pop-up here. Under Article 5(3) of the ePrivacy Directive consent is needed to store things on your device, except where the storage is strictly necessary for something you explicitly asked for — and a preference you set yourself, by clicking a switch, which lasts one tab and nothing longer, is exactly that. Asking you to agree to it would be theatre. What is owed instead is this paragraph, so that you know.

What happens when you place a bid

Nothing is transmitted. The form asks for your brand name, a link, an optional logo, your email address, your bid amount and an optional note — and then it hands the finished message back to you, to copy or to send from your own mail app. The site has no server to receive it and no database to put it in.

So the moment your data reaches Jeremi Napierała is the moment you send that email, and it arrives the way any email does. From there it is used for one thing: running the auction — telling you if you have been outbid, telling you if you have won, and invoicing you if you have. It is not added to a mailing list and not passed to anyone else for their own purposes.

Legal basis: handling your bid is a step taken at your request before a contract, and then performance of that contract if you win — GDPR Article 6(1)(b). Invoices are kept because tax law says so — Article 6(1)(c).

How long: bids that lose are deleted once the auction has closed and the winners are settled. Correspondence and invoices tied to a slot that was actually paid for are kept for as long as accounting rules in Poland require, and then deleted.

Sponsor logos

If you win a slot, the logo you send is published on this page, in the slot you won, next to the brand name and the link you gave. That is the entire point of the transaction, and it is public. Your email address is not published.

Server logs

The site is served by a hosting provider, which keeps the usual access logs — IP address, the page requested, the time, and what browser asked for it. They exist to keep the site up and to spot abuse, they are not linked to anything else here, and they are not used to build a picture of you. Legal basis: legitimate interest in a working, secure site — GDPR Article 6(1)(f).

Links out

Sponsor links, the links in the footer and any shop link go to other people’s sites, and what those sites do is covered by their own policies, not this one.

Your rights

You can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, ask for it to be restricted, object to it being processed, or ask for it in a portable form. Write to bobikomo@gmail.com and you will get an answer within a month. In practice, for almost everyone reading this, the honest answer will be that there is nothing held at all.

If you think that answer is wrong, you can complain to the President of the Personal Data Protection Office (UODO), or to the data protection authority where you live.

Children

This is a business-to-business auction and it is not aimed at children. Do not place a bid if you are not old enough to enter a contract where you live.

Changes

If what the site does changes, this page changes with it and the date at the top moves. This version is from 13 September 2026.