Privacy
Last updated: 2026-10-19
This notice explains what personal data QuantPulse (quantpulse.app) collects, why, and what rights you have. We wrote it in plain English. It follows Article 13 of the EU General Data Protection Regulation (GDPR).
1. Who is responsible (the controller)
Serhii Oryshych, a private individual based in Poland, runs QuantPulse. There is no company yet. Contact for all privacy questions: serhii.oryshych@gmail.com. Postal address: ul. Filtrowa 79/30, 02-032 Warsaw, Poland. We have not appointed a Data Protection Officer because the law does not require one for this activity.
QuantPulse is not open yet. Today the site only collects sign-ups, price reservations and (if you choose) assessment reports. Nothing is sold and no payment is taken.
2. What we collect, why, and the legal basis
| What you do | Data we store | Why | Legal basis (GDPR Art. 6) |
|---|---|---|---|
| Join the waitlist | E-mail; target role (trader, researcher, quant developer or other), when your next assessment is, organization (optional), and which page you used (landing page, demo or quiz); price variant you saw (A or B); a coarse traffic-source label (for example "reddit", "google" or "direct", from the link you used); date and time; the consent text you agreed to | To e-mail you about the launch and early access. We send one confirmation e-mail per sign-up; no launch e-mail goes out unless the address is confirmed and consent is still active. | Your consent (Art. 6(1)(a)) |
| Click "Reserve" on a price | E-mail; plan and price shown; price variant; date and time. Only if you tick the optional launch-e-mail box: a separate waitlist record for the same e-mail (plan, price variant, a coarse traffic-source label such as "reddit", "google" or "direct", and the consent text you agreed to, with version and time) | To hold that price and tell you when we open | Steps you asked for before a possible contract (Art. 6(1)(b)) for the price hold; your consent (Art. 6(1)(a)) for the optional launch e-mails |
| Send an assessment report | E-mail; the report (firm, role, assessment type, platform, month taken, duration in minutes, number of questions, description in your words); the price variant you saw; a coarse traffic-source label (for example "reddit", "google" or "direct", from the link you used); acceptance of the contributor terms, with the version of the consent text and the time you accepted; date and time | To review and rewrite the report, give you the product credit, and handle corrections or takedowns | Contract — the contributor terms (Art. 6(1)(b)); for keeping a record of your acceptance and handling legal claims: our legitimate interest in defending ourselves (Art. 6(1)(f)) |
| Any form | A one-way, in-memory rate-limit key based on your IP address; a hidden anti-spam field | To stop spam and abuse | Legitimate interest in keeping the site safe (Art. 6(1)(f)) |
| Any visit | Technical request logs (IP address, browser, time, page) kept by our host | To deliver and secure the site | Legitimate interest (Art. 6(1)(f)) |
| Any form where you tick the box | Separate opt-in for launch e-mails | Launch and early-access e-mails | Consent (Art. 6(1)(a)) |
The traffic-source label is only a short category (for example "reddit" or "direct"), never a full web address.
You do not have to give us any data. Without an e-mail we cannot add you to the waitlist, hold a price, or give a report reward.
Please do not put in a report: names of interviewers or other people, your own sensitive data (health, religion and similar), verbatim test content, screenshots, or confidential documents. If you do, we delete that part when we rewrite the report.
We do not use your data for automated decisions with legal or similarly significant effects, and we do not sell it.
3. Price testing
We are testing two prices (variant A and variant B). Each visitor is shown one of them, chosen by the link they used. The variant is not based on your profile, location or behaviour. We record which variant you saw with your sign-up so we can count results. The variant comes from the link you used to reach the site; without such a link you see variant A.
4. Cookies and similar storage
We use no analytics, no advertising cookies and no tracking pixels.
Visit counts. Our server counts page views as daily totals only: site, date, page (landing, app or quiz), price variant (A/B) and a coarse source label (for example "reddit", "google" or "direct", or the utm_source of an ad link). We store no IP address, no browser details, no full web address and nothing that identifies you or your device, and we put nothing on your device. Legal basis: our legitimate interest in knowing how many people visit (Art. 6(1)(f) GDPR). The totals are kept for 24 months.
We do not store or read anything on your device. The price variant comes from the link you used to reach the site (for example from an ad). If you arrive without such a link, you see variant A.
5. Who receives your data (recipients and processors)
We share data only with service providers who process it for us under a data processing agreement:
- Vercel Inc. (USA) — hosting and request logs.
- Neon (database provider; Neon, LLC, part of Databricks, Inc.) — database hosting. Database region: EU (Frankfurt, Germany — AWS eu-central-1).
- An e-mail delivery provider (to be named here before the first e-mail) — sending e-mails. We have not chosen one yet; this notice will be updated before the first e-mail is sent.
We may disclose data if the law requires it, or to establish or defend legal claims (for example, when we handle a takedown request about a report).
We do not publish your name or e-mail. Published content made from reports is rewritten and does not name you.
6. Transfers outside the EU
Vercel Inc. and Neon are US companies. Our database is stored in the region named in section 5, but these providers may access data from the US or other countries (for example for support). We rely on these safeguards:
- Vercel Inc. — the EU–US Data Privacy Framework (Vercel states that it is certified).
- Neon (Neon, LLC / Databricks, Inc.) — the EU–US Data Privacy Framework (Databricks states that Databricks, Inc. and Neon, LLC are covered by its certification).
- E-mail provider — to be named here before the first e-mail is sent, together with its safeguard.
If a provider stops being certified, the transfer relies on the EU Standard Contractual Clauses in the provider's data processing agreement. You can ask us for a copy of the safeguards at serhii.oryshych@gmail.com.
7. How long we keep data
| Data | How long |
|---|---|
| Waitlist and price reservations | Until launch + 12 months, and at most 24 months after sign-up if we have not launched; or until you withdraw consent / ask us to delete — whichever is first |
| Raw report (your original text) | Deleted after rewrite or at most 12 months, whichever comes first |
| Rewritten report content | Kept and may be published. It does not identify you, so it is not your personal data |
| Record that you accepted the contributor terms, and your reward status | Until the reward is used or expires, then up to 3 years to handle any legal claim about the report |
| Takedown and correction records | 3 years |
| Host request logs | The short period set by our host (normally days) |
8. Your rights
You have the right to:
- access your data and get a copy;
- correct it;
- delete it;
- restrict how we use it;
- receive it in a portable format (for data based on consent or contract);
- object to use based on legitimate interest;
- withdraw consent at any time — this does not affect use before you withdrew. Every e-mail has an unsubscribe link.
Write to serhii.oryshych@gmail.com. We answer within one month (we may extend by two months for complex requests and will tell you why). We may ask you to confirm the request from the e-mail address we hold.
Complaints: you can complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl — or to the authority in the EU country where you live or work.
9. Age
QuantPulse is for people aged 16 or over. Do not sign up if you are younger. People who send a report must be 18 or over (see the Contributor terms).
10. Security
Data is sent over HTTPS, the database is access-controlled, and only Serhii Oryshych has access. No system is perfectly secure; if a breach puts your rights at high risk, we will tell you without undue delay.
11. US visitors
We do not sell or share personal information for cross-context behavioural advertising. We honour the rights in section 8 for all visitors, wherever they live.
12. Changes
We will post any change here with a new date. If a change is important (for example a new e-mail provider or a new purpose), we will also e-mail people on the waitlist before it applies.