Privacy Policy
Last updated: 7 October 2026
Who is responsible for your data
Michał Stachyra, Bizo Mobile – Aplikacje Mobilne
ul. Borkowska 25B/30, 30-438 Kraków, Poland
Email: contact@bizomobile.com
We are the controller of the personal data processed through tattoodesign.me, within the meaning of the General Data Protection Regulation (GDPR). We have not appointed a Data Protection Officer; please use the address above for any question about your data.
What this policy covers
This policy describes what happens to your data when you visit tattoodesign.me. It does not cover our mobile applications, which are described in their own listings in the Google Play Store and the Apple App Store, nor any third-party website you reach by following a link from here.
Subscriptions in our mobile apps
If you buy a subscription in one of our apps, it is billed and managed by the store you bought it from. You can check, change or cancel it there at any time. Uninstalling the app does not cancel a subscription.
- Google Play (Android): manage your subscriptions on Google Play, or in the Play Store app: profile icon > Payments & subscriptions > Subscriptions.
- App Store (iPhone, iPad): manage your subscriptions in the App Store, or Settings > your name > Subscriptions. Apple’s help: Cancel a subscription from Apple.
Data we process, and why
Information your browser sends automatically
Like almost every website, our server records each request: your IP address, the page requested, the date and time, your browser and operating system, and the page you came from. We use this to keep the site running, to diagnose faults and to detect abuse such as brute-force login attempts. The legal basis is our legitimate interest in operating and securing the site (Art. 6(1)(f) GDPR). These logs are kept by our hosting provider for a limited period and are not used to build any profile of you.
Comments
If you leave a comment, we store the content of the comment, the name and email address you provide, your IP address and your browser’s user agent string. The IP and user agent are used for spam detection. The legal basis is your consent, given by submitting the form (Art. 6(1)(a) GDPR), and our legitimate interest in preventing spam (Art. 6(1)(f) GDPR). Comments and their metadata are kept indefinitely so that follow-up comments from the same person can be recognised and approved automatically. You can ask us to delete them at any time.
Newsletter
If you subscribe to the newsletter, we store your email address together with the date and IP address of the sign-up, which serve as proof that consent was given. You can unsubscribe with the link in every message, which ends the processing immediately. The legal basis is your consent (Art. 6(1)(a) GDPR).
Measurement and testing
We want to know which articles are useful and which are not, so we use analytics. These tools only run after you allow them in the cookie banner, with the one exception described in the „Google consent mode” section below. We do not use the data to advertise to you, we do not sell it, and we do not try to identify you personally.
Cookies and the services we use
The table below lists every third-party service that can run on this site, what it is for, what it receives and on what legal basis. Everything marked „Consent” is blocked until you allow it.
| Service | Purpose | Data involved | Legal basis |
|---|---|---|---|
| Google Analytics 4 (Google Ireland Limited) | Audience measurement — how many people visit, which pages they read, which country they come from. | Cookies _ga and _ga_*, a randomly generated identifier, IP address (truncated by Google), device and browser type, pages viewed. | Consent — Art. 6(1)(a) GDPR |
| Jetpack Stats (Automattic Inc.) | A second, simpler visit counter built into the Jetpack plugin. | IP address, user agent, page viewed. No advertising identifiers. | Consent — Art. 6(1)(a) GDPR |
| Jetpack CDN / Photon (Automattic Inc.) | Serving images faster from servers closer to you. | Your IP address and user agent reach the image server when an image loads. No cookies are set. | Legitimate interest — Art. 6(1)(f) GDPR, efficient delivery of the site |
| Mailchimp (Intuit Inc.) | Sending the newsletter, only if you sign up. | The email address you enter, plus the date and IP of the sign-up as proof of consent. | Consent — Art. 6(1)(a) GDPR |
| Nelio A/B Testing (Nelio Software SL) | Testing two versions of a page against each other to see which works better. | Cookies nabAlternative, nabSegmentation, nabExperimentsWithPageViews, nabUniqueViews, nabCheckWritePermission — which variant you were shown. | Consent — Art. 6(1)(a) GDPR |
| WordPress Popular Posts | Building the „popular posts” list. | A view counter on our own server; no third party involved. | Legitimate interest — Art. 6(1)(f) GDPR |
| Post Views Counter | Counting how many times an article has been read. | A counter stored on our own server; no third party involved. | Legitimate interest — Art. 6(1)(f) GDPR |
| Boxzilla | Remembering that you already closed a pop-up so it does not reappear. | Cookie boxzilla_box_*. Stored in your browser only. | Legitimate interest — Art. 6(1)(f) GDPR |
| Complianz (Complianz B.V.) with the WP Consent API | Showing the cookie banner and recording your choice. | Cookies cmplz_* holding which categories you accepted and when. | Legal obligation / legitimate interest — proving consent was given |
| Gravatar (Automattic Inc.) | Showing an avatar next to a comment. | A hash of the email address you used to comment. | Legitimate interest — Art. 6(1)(f) GDPR |
Your choices
When you first arrive you are asked to choose which categories of cookies you accept. Use the cookie settings link in the footer to reopen the banner and change or withdraw your choice at any time. Withdrawing consent is as easy as giving it, and it does not affect the lawfulness of anything that happened before you withdrew it.
You can also block or delete cookies in your browser settings. Note that some parts of the site — embedded videos in particular — will not work if you block everything.
Google consent mode
This site uses Google’s consent mode. It is worth explaining plainly, because it means something happens even when you say no.
If you accept analytics cookies, Google Analytics works normally: it sets the cookies listed above and measures your visit.
If you refuse, no cookies are set and no identifier is stored on your device. However, the Google tag still loads and sends Google a signal without cookies, containing your IP address, your user agent, the address of the page and the fact that you refused. Google uses these signals, in aggregate, to estimate statistically how many people visited without consenting. Google calls this behavioural modelling. No profile of you is built and you are not recognised on your next visit.
We enabled this so that our visitor numbers are not badly distorted by the people who decline. If you would rather nothing at all was sent, block googletagmanager.com in your browser or use a content blocker; the site works fine without it.
Our Google Analytics property identifier is G-S07LVLXZHW. Google’s own explanation of how it handles this data is at policies.google.com/privacy.
Sending data outside the European Economic Area
Some of the providers above are American companies or use American infrastructure — Google and Automattic in particular, and Mailchimp. When your data reaches them it may be processed in the United States. Those transfers rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the Commission’s Standard Contractual Clauses. You can ask us for a copy of the safeguards that apply.
How long we keep things
- Server logs — a short period, at our hosting provider, for security and diagnostics.
- Comments — indefinitely, unless you ask us to remove them.
- Analytics data — according to the retention period set in Google Analytics, after which Google deletes the user-level records.
- Your cookie choice — until it expires or you clear it, so that we do not ask you again on every page.
- Newsletter address — until you unsubscribe.
Your rights
Under the GDPR you have the right to:
- obtain a copy of the data we hold about you (Art. 15),
- have inaccurate data corrected (Art. 16),
- have your data deleted (Art. 17),
- have the processing restricted (Art. 18),
- receive your data in a portable format (Art. 20),
- object to processing based on our legitimate interest (Art. 21),
- withdraw any consent you have given, at any time (Art. 7(3)).
Write to contact@bizomobile.com and we will answer within one month. If you think we are handling your data badly, you can complain to the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa (uodo.gov.pl).
Is any of this required to use the site?
No. You can read everything here without giving us any personal data, without an account, and while refusing every optional cookie. Providing an email address is only necessary if you want to leave a comment or receive the newsletter. There is no automated decision-making and no profiling.
Changes to this policy
If we add a service or change how we use data, we will update this page and the date at the top. Material changes affecting cookies will also reappear in the consent banner.