Privacy policy
Last updated:
1. Who is the data controller?
The controller of the data processed on BazaKodow.pl is Jakub Piotrowski. For privacy enquiries, email kontakt@jpconcept.pl.
We do not offer user accounts or registration, so we do not collect visitors’ first names, surnames or email addresses.
2. What data we store
- Browser preferences: the “lang” cookie (selected language, 12 months) and a localStorage entry (selected light/dark theme). These are used solely for convenience and are not shared with anyone.
- Search queries: the text you enter (postal code, locality or street) is processed to display results. We do not link it to your identity.
- AI assistant: the address description you enter is sent to a language model to identify the locality and street. The model does not invent postal codes: we always retrieve them from our database. We cache identical descriptions (normalised text and the result) to avoid processing the same query twice; the IP address is not included in this cache.
- Assistant limits: the network address is converted into a one-way hash (SHA-256) and used to enforce request limits. The hash is irreversible: it cannot be used to reconstruct the IP address or identify a person.
- Visitor statistics: aggregated traffic data (including pages visited, country and device type) helps us assess what works and what could be improved.
3. External services
Some parts of the website load from external servers. When these resources are downloaded, their operators can see your IP address and basic browser information:
- OpenStreetMap: embedded maps showing postal code areas;
- Google Fonts: fonts used on the website;
- the website host and database provider: the hosting infrastructure that runs the Service;
- the language model gateway: only when you query the AI assistant.
We do not use advertising networks, tracking pixels or advertising profiles. We do not sell or share data with third parties for marketing purposes.
4. Legal basis and retention periods
We process preferences and statistics on the basis of our legitimate interest (Article 6(1)(f) GDPR), namely operating and improving the Service. Assistant limits are necessary to protect against automated attacks.
Browser preferences are stored until you delete them (the cookie expires after 12 months). Rate-limit records are usable only within their relevant time window (10 minutes or one day), and the assistant’s cache is refreshed when the data is updated.
5. Your rights
You have the right to:
- access, rectify and erase your data;
- restrict processing and object to it, for example to visitor statistics;
- data portability and withdrawal of consent at any time, if you have given consent.
To exercise these rights, email kontakt@jpconcept.pl. You can also contact the supervisory authority: the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa, Poland.
6. Security and updates
The website operates exclusively over an encrypted HTTPS connection. Technical data is not disclosed publicly. We update this policy when the way the Service operates changes; the latest version is always available at this address.
You can find out more about our data sources in the site description, and the rules for using the site are set out in the terms of use.

