Privacy Policy
Last updated: March 8, 2026.
1. Who we are / Data controller
darkounity.com is operated by Tomicz Engineering LLC, registered in Wyoming, USA. This policy explains how we collect, use, store, and share personal data when you use the site, contact us, subscribe to emails, or submit content through site tools. For privacy requests, contact us at contact@darkounity.com or info@tomiczengineering.com.
2. Data we collect
We collect personal data directly from you, automatically through site technologies, and through service providers that help run the site.
- Newsletter signup: Your email address, and any other details you choose to provide, are collected when you subscribe. This data is processed by Brevo (Sendinblue) so we can send newsletter and marketing emails.
- Contact form and mentorship inquiries: If you contact us or submit a mentorship or enrollment request, we collect information such as your name, email address, and the message or request details you send. These submissions are sent through EmailJS.
- Interview tool submissions: If you complete an interview form, we may collect your name or nickname, written answers, uploaded images, and optional links. This content is used to prepare draft blog material and may later be edited and published on darkounity.com.
- Roadmap access data: Some roadmaps are protected by passwords set by the site owner. Passwords are stored in hashed form and used only to verify access.
- Booking links: If you choose to book a call or session, you may be redirected to Calendly, which processes booking data under its own terms.
- Usage and analytics data: Depending on your location, Google Analytics 4 may load only after consent or may be enabled by default where prior consent is not required. If enabled, it may collect data such as pages viewed, approximate location, browser and device information, referral data, and interaction events like newsletter signup or contact-form submission. Measurement ID: G-RJW428Z054.
- Technical requests to third parties: The site loads assets and services such as Google Fonts, which may receive technical request data such as IP address, browser details, and request metadata when pages load.
- Geolocation check: On first visit, we may make a lightweight request to ipapi.co to estimate your country from your IP address so we can decide whether an analytics consent prompt is required in your region.
- Consent preference data: We store your cookie and analytics preference locally on your device so we can remember your choice on future visits.
3. Cookies, local storage, and consent
We use a minimal amount of storage and similar technologies on the site. Some are strictly necessary for the site to function properly, while analytics is optional.
- Strictly necessary storage: We store your privacy preference so the site remembers whether analytics is allowed or declined.
- Regional consent handling: We use an IP-based country lookup to decide whether a prior consent prompt is required before analytics can run.
- Analytics: For visitors in the EU, EEA, UK, Switzerland, and other consent-required regions we configure, Google Analytics loads only after you actively allow it through our consent popup or cookie-preferences controls. In other regions, analytics may load by default unless you later disable it.
- Changing your choice: You can withdraw or update consent at any time through the site footer or the button above on this page.
If you decline analytics, we do not intentionally allow further analytics tracking on that device or browser session unless you later change your choice.
4. How we use the data
- Newsletter data: To send updates, articles, or marketing emails until you unsubscribe.
- Contact and mentorship requests: To review, respond to, and manage your inquiry.
- Interview submissions: To review your submission, prepare draft content, and potentially publish a related article or feature.
- Roadmap access data: To control access to protected roadmap content.
- Booking links: To let you schedule a call or meeting if you choose to do so.
- Analytics data: To understand site usage, improve performance, and measure engagement.
- Consent records: To honor and remember your privacy choices.
5. Legal bases under GDPR
If the GDPR, UK GDPR, or similar laws apply to your data, we rely on one or more of the following legal bases depending on the context:
- Consent: For optional analytics and for newsletter marketing where consent is required.
- Steps before entering into a contract or performance of a contract: When you contact us about mentorship, services, or scheduling.
- Legitimate interests: To operate the website, respond to non-marketing inquiries, protect the business, maintain records, and secure the site where those interests are not overridden by your rights.
- Legal obligations: When we must keep or disclose information to comply with applicable law, lawful requests, or business record requirements.
6. Data retention
We keep personal data only for as long as it is reasonably necessary for the purpose it was collected, unless a longer period is required or justified.
- Newsletter data: Retained until you unsubscribe, withdraw consent, or the record is removed from Brevo.
- Contact and mentorship inquiries: Retained as long as useful for communication, follow-up, internal records, and legitimate business reference.
- Interview submissions and related records: May be kept indefinitely, especially if they support published or archived site content.
- Published content: Public articles, interviews, or related materials may remain published until updated or removed.
- Analytics data: Retained according to the configuration and policies of the analytics provider.
- Consent preferences: Retained locally on your device until cleared, overwritten, or changed by you.
7. Sharing and third parties
We share personal data only where needed to operate the site, provide requested services, or support site infrastructure.
- Brevo — newsletter delivery and mailing-list management.
- EmailJS — delivery of contact and mentorship form submissions.
- Calendly — scheduling calls or meetings when you choose to book through Calendly links.
- Google — analytics services and hosted fonts.
- ipapi.co — IP-based geolocation used to decide whether a consent prompt is required before analytics can run.
- Hosting providers and infrastructure vendors — for hosting, storage, and site delivery.
We do not sell personal data. We do not knowingly share personal data for third-party advertising. Service providers may process data on our behalf under their own policies and contractual terms.
8. International transfers
The data controller is registered in the United States. The site operator may access or process data from outside the United States, and service providers may process data in the US, the European Union, and other jurisdictions where they operate.
If you are located in the EEA, UK, or Switzerland, this may involve transfers of personal data to countries that do not provide the same level of legal protection as your home jurisdiction. Where applicable, we rely on provider safeguards, contractual measures, or your consent for those transfers.
9. Your rights
Depending on where you live and the law that applies, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete personal data, subject to legal obligations and legitimate business needs.
- Restrict or object to certain processing.
- Withdraw consent at any time where processing depends on consent, including analytics consent.
- Data portability where applicable.
- Opt out of marketing emails using the unsubscribe link in any newsletter email.
- Lodge a complaint with your local data protection authority if you believe your rights have been violated.
To exercise any of these rights, contact us at contact@darkounity.com, info@tomiczengineering.com, or via the contact form. We may need to verify your identity before responding.
10. Security
We take reasonable technical and organizational measures to protect personal data, including secure hosting, limited access where appropriate, and hashed passwords for protected roadmap access. No method of transmission, storage, or electronic security is completely secure, so we cannot guarantee absolute security.
11. Do Not Track and third-party tracking
Some browsers offer a "Do Not Track" setting. At this time, darkounity.com does not respond differently to browser-based Do Not Track signals.
Third-party services, such as Google Analytics or Google Fonts, may collect technical information according to their own practices when those services are used or loaded.
12. Changes to this policy
We may update this policy from time to time to reflect legal, technical, or business changes. Updates will be posted on this page with a revised "Last updated" date. Where required, we will request renewed consent before optional processing resumes.
13. Contact
For privacy questions, consent requests, or data-rights requests, contact Tomicz Engineering LLC via contact@darkounity.com, info@tomiczengineering.com, or the contact form on darkounity.com.