Privacy.

The short version

This site runs its own analytics rather than Google's. Nothing is shared with an advertising network, nothing is sold, and your IP address is never stored: it is used to resolve a country and then discarded, in memory, before anything is written down.

Before you make a choice about cookies, the site counts the visit but cannot connect it to any other visit you have made. If you accept, it remembers a random identifier so returning visits can be recognised as returning. That is the whole difference.

What is measured

Every page load sends one small record to this site's own server. It contains the page, the referrer, any campaign parameters in the URL, your browser and device type, your country and city, screen size, and while you read: how far you scrolled and how long the page was actually in front of you. Time stops counting when you switch tabs or stop interacting, which is why the numbers here are lower and more honest than a typical analytics tool. A visit counts as a bounce when it is a single page viewed for under 10 seconds of that engaged time.

It also records specific things you do: opening a question, using a filter, clicking a WhatsApp button or an outbound link, downloading a file, starting a form, and abandoning one. None of these carry what you typed.

What is deliberately not done. No fingerprinting, no canvas reading, no hashing of your browser into an identifier, no cross-site tracking, no advertising pixels, and no cookie set on the parent domain. rock.henkwolff.com is a separate host and nothing described on this page is sent to it.

Cookies and storage

Name	Set when	Purpose	Life
hw_sid	Always. Session storage, not a cookie.	Ties the pages of one visit together. Gone when you close the tab.	The tab
hw_consent	When you choose	Remembers your choice so you are not asked again.	13 months
hw_vid	Only if you accept	A random identifier so a returning visit is recognisable as returning.	13 months
hw_variant	Only if you accept	A single letter. Two designs of the homepage are being compared, and this records which one you were shown so it does not change under you between visits. It is not an identifier and it says nothing about you.	3 months

Declining leaves the first row only, every visit then looks like a first visit, and the homepage you see is always the same one. Withdrawing consent later deletes the identifier from your browser immediately. All of these are set on this exact host, never on a parent domain, so none of them are sent anywhere else.

When you send a form

The forms on this site ask for a name, an email address, and details about your business and what you are trying to solve. That is stored so it can be answered, and it is passed into the CRM behind rock.henkwolff.com, which is also run by Wolff Capital Holding EOOD, so that a conversation has its context attached.

Alongside your answers, the record carries which pages you read before submitting and how long you spent, because that is what makes a first reply useful rather than generic. It does not carry your IP address, and it never carries the contents of a field you started filling in and then cleared.

Forms are checked by Cloudflare Turnstile, which is a challenge rather than a tracker: it tells this site whether a submission looks automated. A failed check never blocks you; it only flags the submission for a human to look at.

Who else sees it

• Cloudflare hosts the site and stores the data described above, in their database and key-value products. They are a processor acting on instruction.
• Wolff Capital Holding EOOD, the controller, through the CRM at rock.henkwolff.com.
• Nobody else. No advertising network, no data broker, no analytics vendor. Nothing on this site is sold or shared for marketing purposes.

How long it is kept

Individual visit records are deleted after 13 months, automatically, every night. What survives is the daily totals, which are counts with nothing in them that could point at a person. Enquiries sent through a form are kept for as long as the business relationship or a live conversation justifies, and deleted on request.

Your rights

Under the GDPR you can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, object to it being processed, or withdraw consent at any time. Email henk.wolff@igamingconsultant.eu and it is handled inside thirty days, usually the same week. No account, no form, no verification hoop.

If the answer is unsatisfactory, you can complain to the Bulgarian Commission for Personal Data Protection, or to the supervisory authority where you live.

Changes

The date at the top of this page changes whenever the text does. Because the figures here are read directly from the code that implements them, this notice cannot quietly fall out of step with what the site does.