Privacy Policy
Last updated: July 2026
Who Is Responsible for Your Data
AirbrushDOC.com is run by a single person: Sergej Voronko (the "data controller" in GDPR terms). No company, no team, no data department — if you email about your data, I'm the one who answers.
Contact: contact@airbrushdoc.com
What I Collect, and Why
Newsletter
If you subscribe, your email address (and name, if you give one) is stored with MailerLite (MailerLite Limited, Ireland — their privacy policy). Legal basis: your consent, given by double opt-in. It's used to send you the downloads you signed up for and occasional new-content emails — nothing else. Every email contains an unsubscribe link; unsubscribing removes you from the list.
Contact form & email
If you use the contact form, your name, email address, and message are stored in this site's own Cloudflare-hosted database and delivered to me as a notification via Telegram, so I can reply. Legal basis: legitimate interest in answering your enquiry. Messages are deleted once the conversation is resolved. Emailing me directly works the same way, minus the database.
Comments
If you post a comment, your name and comment text are stored in this site's own comment system (a Cloudflare-hosted database) and shown publicly once approved. Your email address is never stored — if you provide one, only an anonymous one-way hash of it is kept, used solely to display your Gravatar avatar. A one-way hash of your IP address is stored briefly for spam and rate-limiting purposes only. Legal basis: your consent, by submitting the comment. You can request removal of any comment you wrote at any time.
Cookies & Tracking
- Essential storage: Your cookie-consent choice is stored in your browser so the banner doesn't reappear. That's required functionality and can't be disabled.
- Analytics: This site currently runs no analytics platform — no Google Analytics, no tracking pixels, no advertising profiles. If privacy-respecting, aggregate-only analytics are added later, this policy will be updated first.
- Affiliate cookies: When you click an affiliate link (marked
/go/...), the destination platform (e.g. Amazon) sets its own cookies to attribute the referral. Those are their cookies under their policies — I have no access to or control over them. - Embedded content: A few articles embed YouTube videos, and the newsletter form loads from MailerLite. Those third parties may set their own cookies when the embed loads or you interact with it.
- Avatars: Comment avatars are loaded from Gravatar (Automattic Inc.) using the anonymous hash described above; your browser's request to Gravatar is subject to Automattic's privacy policy.
Who Processes Data on My Behalf
- Cloudflare — hosts the site, the comment system, and contact form messages, and provides network security. Server logs (including IP addresses) are handled by Cloudflare as part of operating the service.
- MailerLite — newsletter storage and sending.
- Telegram (Telegram Messenger Inc.) — delivers contact form messages and comment moderation notifications to me privately.
- Gravatar (Automattic) — comment avatars, hash-based lookup only.
I don't sell, rent, or share your personal data with anyone for marketing purposes. Full stop.
How Long Data Is Kept
- Newsletter: until you unsubscribe.
- Contact messages: as long as the conversation is live, then deleted.
- Comments: as long as they're published; deleted on request.
- IP hashes (spam control): only meaningful for one hour of rate-limiting; not linked to your identity.
Your Rights (GDPR)
If you're in the EU/EEA (and honestly, even if you're not — I apply the same standard to everyone), you have the right to:
- Access — ask what data I hold about you
- Rectification — have incorrect data corrected
- Erasure — have your data deleted (unsubscribe, comment removal, mailbox deletion)
- Portability — receive your data in a usable format
- Objection & restriction — object to or limit specific processing
- Withdraw consent — at any time, without affecting past processing
To exercise any of these, email contact@airbrushdoc.com. You also have the right to lodge a complaint with your local data protection supervisory authority.
Children
This site is not directed at children under 16 and I do not knowingly collect their data. If you believe a child has submitted personal data, contact me and I'll delete it.
Changes to This Policy
If the site starts processing data differently (for example, adding analytics), this page will be updated before the change goes live, with the date above revised.
Affiliate relationships and merchandise terms are covered separately in the Affiliate Disclosure & Legal page.