← theglassesrush.com

Privacy Policy

Last updated: September 3, 2026

1. Controller

The controller of personal data collected through theglassesrush.com is Codently Maciej Ziółko, os. XX-lecia 4/16, 32-340 Wolbrom, Poland, VAT ID (NIP): PL6372210398, REGON: 386280138. Contact: hello@theglassesrush.com.

2. What we collect, why, and on what basis

Email address (free chapter and updates). If you submit the form, we process your email to send the free chapter and occasional updates about the book, the database, and the market. Legal basis: your consent (GDPR art. 6(1)(a)), withdrawable anytime via the unsubscribe link in every email.

Purchase data. Purchases are processed by Stripe through Stripe Managed Payments, which acts as Merchant of Record and as an independent controller of checkout, payment, and tax data (name where provided, email, payment details, tax location). See Stripe's privacy policy. We receive the buyer's email and order metadata in order to deliver the product, provide updates, and handle support. Legal basis: performance of a contract and our legitimate interest in customer service (GDPR art. 6(1)(b), (f)).

Your email inside the delivered PDF. Each downloaded copy of the ebook is stamped with the buyer's email address and an order reference, to discourage redistribution of a paid product. Legal basis: our legitimate interest in protecting the work (GDPR art. 6(1)(f)).

Database access. If you buy the XR Opportunity Database, we issue a signed access link and store a functional cookie in your browser so the database stays unlocked. This cookie is strictly necessary for the service you purchased.

Analytics and advertising cookies. With your consent, we load the Meta Pixel and (where configured) the TikTok Pixel to measure which campaigns bring readers here and to build advertising audiences. These load only after you press Accept in the cookie banner; if you decline, they are never loaded. Legal basis: consent (GDPR art. 6(1)(a), ePrivacy). You can change your mind at any time by clearing site data in your browser, which brings the banner back.

Server-side purchase measurement. When a purchase completes, we send a server-side event to Meta's Conversions API containing a hashed (SHA-256) form of the buyer's email plus technical data, so completed sales can be attributed to campaigns. Legal basis: legitimate interest in measuring our own advertising (GDPR art. 6(1)(f)). You may object to this at hello@theglassesrush.com.

Technical data. Our hosting provider processes standard server logs (IP address, user agent, request metadata) for security and delivery of the Site. Legal basis: legitimate interest (GDPR art. 6(1)(f)).

3. Processors and recipients

Your data may be processed on our behalf, or as independent controllers, by:

Some providers are located outside the European Economic Area, mainly in the United States. Transfers rely on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses, as applicable to each provider.

4. Retention

Email-list data: until you unsubscribe, or after prolonged inactivity. Order-related data: for the period required by tax and accounting law. Access links for purchased products: while the product is supported. Server logs: short rolling windows set by the hosting provider.

5. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or port your data, to object to processing based on legitimate interest, and to withdraw consent at any time (without affecting prior processing). Write to hello@theglassesrush.com. You may also lodge a complaint with a supervisory authority; in Poland this is the President of the Personal Data Protection Office (UODO, uodo.gov.pl), or the authority in your country of residence.

6. US residents

We do not sell personal information for money. Where the use of advertising pixels qualifies as "sharing" for cross-context behavioral advertising under state privacy laws, you can prevent it by declining cookies in the banner, and you may contact us to exercise any state-law rights you hold.

7. Children

The Site and the products are not directed at children under 16, and we do not knowingly collect their data.

8. Changes

The current version of this policy always lives at this address with the date above.