Last updated: 5 July 2026
1. Data Administrator
The administrator of your personal data is Henrik Halvorsen, independent author and publisher. Address: Gilarska 139, 03-589 Warsaw, Poland. You can contact the administrator by email at henrik.halvorsen@knowtheattack.com. This policy applies to the KnowTheAttack Project book series and its companion websites (e.g. knowtheattack.com).
2. Data We Collect
We believe in data minimalism. We only collect information that is strictly necessary to provide you with our content and updates.
- Email address: collected when you sign up for our newsletter or request free bonuses.
- Technical data: standard server logs (IP address, browser type) collected by our hosting provider (GitHub Pages) for security and maintenance.
- Source information: we may track which specific book page you signed up from to better understand which content interests our readers.
3. How We Use Your Data
Newsletter & bonuses (lead magnet). Purpose: to deliver requested free book fragments, bonuses etc., and to send periodic updates regarding upcoming books in the series. Legal basis: your explicit consent (GDPR Art. 6(1)(a)) and the necessity to perform an agreement to deliver requested digital content (GDPR Art. 6(1)(b)).
Data processors. We use trusted third-party services to manage your data:
- MailerLite: used to process form submissions, securely store your email address, and send newsletters.
- Google Drive: used to host and deliver PDF bonuses and book fragments.
4. Platforms & Sales
The KnowTheAttack ebook series is sold exclusively through Amazon Kindle Direct Publishing (KDP). When you purchase a book on Amazon, they act as the independent data administrator and process your payment and personal data under their own Privacy Notice. We do not receive your name, email address, or payment details in connection with individual purchases.
5. Data Retention
- Newsletter data: we keep your email address until you choose to unsubscribe or we discontinue the service.
- Server logs: managed by GitHub Inc. per their own retention schedule (typically up to 90 days).
6. Cookies & Tracking
This website does not use advertising or marketing trackers (such as Meta Pixel or Google Ads). We only use:
- Essential functions: necessary elements for the website to function (e.g. form routing via MailerLite).
- Google Fonts: loaded via stylesheet link; font files are cached by your browser. No cookies are set for this purpose.
7. Your Privacy Rights (GDPR, UK GDPR & US State Laws)
We believe privacy is a fundamental right. Regardless of your location (including the EU, UK, and US states such as California, Virginia, and Colorado), we honor the highest privacy standards:
- Access & deletion: you can request a copy of your data or its complete deletion at any time by contacting henrik.halvorsen@knowtheattack.com. Alternatively, you can always click the “unsubscribe” link at the bottom of our emails.
- Do Not Sell My Personal Information (CCPA/CPRA): we do not sell, rent, or trade your personal information to third parties under any circumstances.
- Non-discrimination: we will not discriminate against you for exercising any of your privacy rights.
- Right to lodge a complaint (EU/UK): you have the right to complain to a Data Protection Authority.
8. Security
We take reasonable technical and organisational measures to protect your data. All data management is performed on secure, updated workstations and through encrypted connections (SSL/TLS).