Privacy & cookies

Last updated 3 November 2026

Short version: we do not sell anything about you, we do not run advertising trackers on this site, and the only non-essential thing here is analytics, which does not load unless you allow it.

Who is responsible

We are below the threshold that requires a data protection officer, so questions about your data go straight to the address above and David answers them himself.

What we collect, and why

When you book a call

The booking form on this site is Calendly. You give it your name, your e-mail address, the time you picked and anything you type into the notes. We use it to hold the meeting and to follow up with you afterwards.

Legal basis: performing a contract, or taking steps at your request before one exists. Kept: as long as you are a client, and for three years after our last contact if you do not become one, so that we remember the conversation if you come back.

When you e-mail or call

Whatever you send us, plus your address or number. Our mail runs on Google Workspace. Legal basis: our legitimate interest in answering you. Kept: three years after the last message in the thread, longer where accounting or tax law requires it.

Analytics, only if you allow it

We use Hotjar to understand which parts of a page people actually read and where they give up. It records how you move through the page and sets its own cookies. It does not load at all until you click "Allow analytics", and declining is a single click. Hotjar truncates IP addresses and we never get your name from it.

Legal basis: your consent. You can take it back at any time:

Change my cookie choice

Server logs

This site is hosted on Vercel, which logs the usual request data, including your IP address and browser, in order to serve the page and defend against attacks. Legal basis: legitimate interest in running a working, secure site. Kept: short-term, per Vercel's own retention.

Fonts

The typeface on this site is served by Google Fonts, which means Google receives your IP address when the page loads. This is required to render the page as designed. Legal basis: legitimate interest in presenting the site correctly.

Cookies and local storage

• rank26-analytics-consent — our own, stored in your browser, remembers whether you said yes or no. Essential, so it needs no consent. It never leaves your device.
• Hotjar cookies (_hjSession…, _hjSessionUser… and similar) — set only after you allow analytics, used to recognise the same session.
• Calendly cookies — set by the booking widget when you interact with it, so it can run the booking.

There is no advertising cookie, no Meta pixel and no Google Ads tag on this site.

Who else sees your data

Only the suppliers we need to run the business, and only for that purpose:

• Calendly — booking (United States, under the EU standard contractual clauses)
• Hotjar — analytics, after consent (Malta, EU)
• Vercel — hosting (United States, under the EU standard contractual clauses)
• Google — e-mail, documents and fonts (United States, under the EU standard contractual clauses)

We do not sell personal data, we do not share it for advertising, and nothing here feeds an automated decision about you.

Your rights

Under the GDPR you can ask us to show you what we hold, correct it, delete it, restrict what we do with it, or hand it over in a portable form. You can object to processing based on legitimate interest, and you can withdraw consent to analytics whenever you like. Write to david@rank26.com and you will get an answer within a month, usually the same week.

If you think we have handled it badly, you can complain to the Czech supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.cz.

Changes

If we add a tool that touches your data, this page changes before the tool goes live, and the date at the top moves.