Privacy notice
Your details, handled plainly.
This site collects as little as possible: what you type into the inquiry form, so we can reply. No cookies, no advertising trackers.
Who is responsible
BoringJob is run by Dzmitry Kazhamiakin within the business incubator of Fundacja Rozwoju Przedsiębiorczości „Twój StartUp”, ul. Żurawia 6/12 lok. 766, 00-503 Warszawa, Poland (KRS 0000442857, NIP 5213641211). The data controller is the foundation.
Your inquiry is read and answered by Dzmitry. For privacy questions or requests, write tohello@boringjob.work.
What the inquiry form collects
- Required: your name, your email address and your description of the problem.
- Optional, only if you fill them in: company, tools you use, timeline, rough budget, preferred reply language and the starting point you selected.
Please don't send passwords, personal data about your customers or employees, special categories of personal data, or confidential files through the form. A general description is enough to start.
Why we use it
Only to reply to your inquiry and, if you want to go further, to discuss scope and prepare a proposal. It is not used for marketing, not added to a newsletter and not sold.
Legal basis under the GDPR: steps taken at your request before entering into a contract (Art. 6(1)(b)) and our legitimate interest in answering business inquiries (Art. 6(1)(f)).
Where your message goes
When you press send, the website's server checks the form and passes your message as an email to the BoringJob inbox. Service providers involved:
- Website hosting and email delivery: Cloudflare, Inc. (Cloudflare Workers and Cloudflare Email Routing). Cloudflare's Data Processing Addendum is part of its terms of service. Data may be processed outside the EEA, including in the United States, under the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses.
- Mailbox where inquiries are received and answered: Google (Gmail), provided in the EEA by Google Ireland Limited. This is a standard Gmail account, so Google handles it under its own terms and privacy policy rather than a separate data processing agreement. Google may store data outside the EEA, including in the United States.
The website's own logs record technical events (for example "inquiry accepted" or "delivery failed") but not your name, email address or message. Like any web server, the hosting provider processes your IP address to deliver pages and keep the service secure.
Abuse protection: the form uses an invisible "honeypot" field and a timing check, which store nothing. It also limits how many messages one connection can send per minute. For that, Cloudflare keeps a short-lived counter keyed by a one-way hash of your IP address, never the address itself.
What the site does not do
- It sets no cookies.
- It has no advertising or cross-site tracking.
- Fonts are served from this site itself, not from Google Fonts or another third party.
- It currently runs no analytics. If privacy-friendly, cookieless statistics are added later, this notice will be updated first.
Drafts stored in your browser
While you write an inquiry, the unsent text is kept in your browser's session storage so it survives moving between pages or reloading. It stays on your device until you press send, and it is removed when you close the tab or after your message has been sent successfully.
How long we keep it
Inquiries that don't lead to a project are deleted within 12 months of the last message. If we work together, correspondence is kept for as long as the project needs it and then for the periods required by law, for example for accounting.
Your rights
Under the GDPR you can ask for access to your data, correction, deletion, restriction of processing, data portability, and you can object to processing based on legitimate interests. You also have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO), uodo.gov.pl.
Security
The site is served over HTTPS. Submitted data is validated and size-limited on the server, credentials for service providers are kept server-side, and form contents are never sent to analytics or placed in URLs.
Changes
Last updated: 21 October 2026.