Legal / Privacy
Privacy Policy
This policy explains what information hypermb.com handles, why, and the choices you have. Optional analytics and session replay are off unless you turn them on. You can change that at any time with .
Last updated:
01 / Who operates HyperMB
HyperMB is built and run by Marius Bobitiu, an individual based in the United Kingdom, who is the controller of the personal data described here. In this policy, “HyperMB” means the operator. Contact: [email protected].
02 / Scope of this policy
This policy covers hypermb.com and all of its pages, in English and Romanian. Links to other sites — GitHub, LinkedIn, mariusbobitiu.dev and project sites such as getcif.dev — take you to services with their own privacy policies. Nothing is loaded from them until you click.
03 / Information collected
| Information | When | Details |
|---|---|---|
| Technical request data | Every visit | Sent by your browser to the web server to load pages. Section 5. |
| Language and privacy choices | When you set them | Two small first-party cookies. Section 11. |
| Analytics | Only if you accept Analytics | How the site is used, through PostHog. Section 6. |
| Session replay | Only if you accept Session Replay | Privacy-masked recordings of interactions. Section 7. |
| Emails you send | Only if you email HyperMB | Your address and message. Section 8. |
HyperMB does not use advertising or marketing cookies, social media plugins, embedded third-party media or third-party fonts. It does not sell personal data, share it for advertising or build profiles about you.
04 / Information you provide directly
The contact form on the Contact page does not send or store messages yet. When you press “Send message”, what you typed stays in your browser, nothing is transmitted to HyperMB or anyone else, and the page tells you so. This policy will be updated before form delivery is switched on.
You can email HyperMB at [email protected]. See section 8.
05 / Technical information
Like any website, hypermb.com only works if your browser sends a request to the server that hosts it. Each request contains your IP address, the page requested, the date and time, your browser's user agent and, usually, the page you came from. This is used to deliver the page and keep the service secure and working.
The site runs on servers provided by Hetzner Online GmbH, Germany. Server logs containing this request data are kept for 30 days and then deleted.
Fonts and images are served from hypermb.com itself. No request is made to Google Fonts, advertising networks or social media platforms when you view a page.
06 / Analytics
Only if you accept Analytics, HyperMB uses PostHog to understand how the site is used and to improve it. Until then, PostHog is not downloaded, started or contacted, and nothing is stored in your browser for it.
With Analytics on, PostHog collects:
- pages viewed, how far you scroll and when you leave a page
- the referring page and campaign parameters in the link (UTM tags); advertising click IDs are removed before sending
- device type, browser, operating system, screen size and language
- clicks on links and buttons, including the element's text, and clicks that repeat or don't respond (“rage” and “dead” clicks)
- where on a page people click and scroll (heatmaps)
- page performance measurements (Web Vitals) and JavaScript error messages
- a small set of named actions, such as opening the menu, opening a project or starting the contact form — never what you type
PostHog identifies your browser with a random ID stored in a cookie and in local storage. HyperMB never links this ID to your name or email address and never creates a personal profile. PostHog receives your IP address with each request and may use it to estimate your approximate location (country and region). The IP address is then discarded and never stored with events.
Requests go through hypermb.com/ingest, a first-party address that forwards them to PostHog Cloud EU. This keeps PostHog's scripts on the same domain as the site; it does not change what is collected or who receives it.
07 / Session replay
Session Replay is a separate choice, and it needs Analytics to be on too. When you turn it on, PostHog records how the page changes as you use it — page structure, mouse movement, clicks, scrolling, window size and page changes — so issues can be watched back as a replay.
- Everything you type into any field is masked in your browser before anything is sent.
- The contact form is excluded completely: replays show an empty block in its place.
- Browser console messages are not recorded.
- Headers and contents of network requests are removed in your browser. Only the address and timing of requests may be recorded.
- Recording stops as soon as you turn Session Replay off.
08 / Contact enquiries
If you email [email protected], HyperMB receives your email address, your name if you include it, your message and any attachments. They are used only to read and reply to you and to follow up on what you asked about. Email is handled by Zoho Corporation, USA. Emails stay in the HyperMB mailbox for as long as they are useful for the conversation. You can ask for yours to be deleted at any time.
09 / How information is used
- to deliver the website and keep it secure and working
- to show the site in your language and respect your privacy choices
- if you accept, to understand how the site is used and fix usability and technical problems
- to reply to messages you send
HyperMB does not make decisions based solely on automated processing that have legal or similarly significant effects on you.
10 / Legal bases for processing
| Purpose | Legal basis |
|---|---|
| Delivering the site, security, technical request data | Legitimate interests in running a secure, working website (Article 6(1)(f)) |
| Language and privacy-choice cookies | Legitimate interests (Article 6(1)(f)). The storage itself is exempt from consent because it is strictly necessary or remembers a preference you set. |
| Analytics and Session Replay | Your consent (Article 6(1)(a)), which is also required for the related storage on your device |
| Replying to your emails | Legitimate interests in answering enquiries, or steps you ask for before a possible agreement (Article 6(1)(f) or (b)) |
The consent rules for cookies and similar technologies are regulation 6 of the UK Privacy and Electronic Communications Regulations (PECR), Article 5(3) of the EU ePrivacy Directive as implemented in each member state, and, in Romania, Article 4(5) of Law no. 506/2004.
12 / Service providers and processors
- PostHog, Inc. — analytics and session replay, using PostHog Cloud EU (hosted on Amazon Web Services in Frankfurt, Germany). PostHog's own subprocessors are listed at posthog.com/subprocessors.
- Website hosting — Hetzner Online GmbH, Germany.
- Email — Zoho Corporation, USA.
Personal data is not sold or shared with anyone for their own purposes, except where the law requires it.
13 / International transfers
The PostHog project is configured for PostHog Cloud EU, so analytics data is stored in the EU. PostHog, Inc. is a US company, and one of its subprocessors (Cloudflare) runs a global network, so some processing may happen outside the UK and EEA. PostHog states that it participates in the EU-US Data Privacy Framework, its UK Extension and the Swiss-US Data Privacy Framework, which can be relied on for transfers of personal data to PostHog in the United States.
HyperMB is operated from the United Kingdom. Personal data of visitors in the EU/EEA is therefore handled in the UK, which the European Commission recognises as providing adequate protection (adequacy decisions renewed on 19 December 2025). The site is hosted in Germany, inside the EEA, which UK law also recognises as adequate.
Email is handled by Zoho Corporation, USA. Zoho states that it participates in the EU-US Data Privacy Framework and its UK Extension, and its data processing addendum includes standard contractual clauses.
14 / Data retention
- Privacy choice cookie: 180 days, then you are asked again.
- Language cookie: 1 year.
- PostHog cookies: 180 days. PostHog browser storage is removed as soon as you withdraw Analytics.
- Analytics events and session recordings in PostHog: 30 days.
- Server logs: 30 days.
- Emails: as long as they are useful for the conversation, or until you ask for them to be deleted.
15 / Security
The site is served over HTTPS. Collection is kept to what is described here: typed input is masked in the browser, the contact form is never recorded, and analytics is not linked to your identity. No online service can guarantee complete security, but these measures limit what could ever be exposed.
16 / Your data protection rights
Depending on where you live, you have the right to:
- access the personal data held about you
- have inaccurate data corrected
- have data erased
- restrict or object to processing, including processing based on legitimate interests
- receive your data in a portable format
- withdraw consent at any time, without affecting processing that took place before
- complain to a data protection authority (section 21)
To use these rights, email [email protected]. You will get a reply within one month. Because analytics data is not linked to your name or email, HyperMB may only be able to find it if you share details that identify your visits, such as the approximate time and pages you visited.
17 / UK visitors
For visitors in the UK, personal data is handled under the UK GDPR and the Data Protection Act 2018, and cookies and similar technologies under PECR, as amended by the Data (Use and Access) Act 2025. HyperMB asks for consent for all analytics, rather than relying on PECR's exception for statistical purposes.
18 / EU/EEA visitors
For visitors in the European Union and the European Economic Area, personal data is handled under the General Data Protection Regulation (Regulation (EU) 2016/679), and storage on your device under the ePrivacy Directive as implemented in your country. Because HyperMB is operated from the UK, the EU GDPR applies where the site offers its services to you or monitors how you use it (Article 3(2)), for example through analytics you have accepted. You can complain to the supervisory authority where you live, where you work, or where you believe an infringement took place.
19 / Romanian visitors
In Romania, the GDPR applies together with Law no. 190/2018, and storage on your device is governed by Law no. 506/2004. The supervisory authority is ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București — dataprotection.ro, [email protected].
20 / Withdrawing consent
Open — also in the footer and the menu on every page — and turn Analytics or Session Replay off. The change applies immediately: recording stops, PostHog stops sending data and its cookies and browser storage are removed. Only your privacy choice is kept, so the site remembers it.
21 / Complaints
If you have a concern, please contact [email protected] first so it can be put right. Complaints are acknowledged within 30 days and answered without undue delay. You can also complain to a data protection authority:
- UK: the Information Commissioner's Office — ico.org.uk/make-a-complaint, 0303 123 1113.
- Romania: ANSPDCP — dataprotection.ro.
- Other EU/EEA countries: your national authority, listed by the European Data Protection Board.
22 / Changes to this policy
This policy is updated when the site's processing changes, and the date at the top changes with it. If optional tracking changes in a way that affects your choice, the privacy banner will ask you again.
23 / Contact
Questions about this policy or your data: [email protected].