Privacy Policy

Last updated: August 2, 2026

This website (mentoring.martinslaby.cz) is a personal mentoring booking page operated by Martin Slaby. This policy explains what data the site collects, how it is used and stored, and what is shared with third parties.

1. Sign-in (email magic link)

To book a session you sign in with your email address. We send you a one-time sign-in link ("magic link") — there is no password and no third-party sign-in provider. Signing in creates a user account consisting of your email address and, optionally, your name.

2. What we store and where

• Account data — your email address and sign-in sessions, stored in our database hosted on Cloudflare (EU/global edge infrastructure).
• Booking data — session type, date and time, and anything you enter in the booking form (a short description of yourself, a CV link, a LinkedIn profile link), stored in the same database.
• Session token — kept in your browser's localStorage so you stay signed in on your device (up to ~180 days). Signing out deletes it.

3. Google Calendar

Your browser never communicates with Google. When you book a session, our server creates a calendar event on Martin Slaby's own Google Calendar and adds your email address as an attendee. Google then emails you a standard calendar invitation, which you can accept or decline. The server also reads free/busy status of the mentor's calendar to hide unavailable slots — this never involves your data or your calendar.

4. Email

We send transactional email only: sign-in links (via Resend, our email provider) and Google Calendar invitations (sent by Google). No marketing, no newsletters. Your email address is shared with Resend solely for the purpose of delivering these messages.

5. Analytics

This site uses Vercel Analytics and Google Analytics 4 to collect anonymous usage data such as page views and button clicks. No personally identifiable information is sent to analytics. You can opt out of Google Analytics with a browser extension like Google Analytics Opt-out.

6. Third-party services

• Cloudflare — hosts the booking API and the database (your account and booking data).
• Vercel — hosts the website.
• Resend — delivers sign-in emails.
• Google Calendar — receives the meeting details (time, session type, your email as attendee, and the booking-form text included in the event description) so it can invite you.
• Google Analytics — anonymous usage statistics.

No data is sold or shared with any other third parties.

7. Data retention and deletion

Bookings are kept as a business record of past sessions. Sign-in sessions expire automatically after ~180 days of inactivity. To have your account and personal data deleted, email info@martinslaby.cz from the address you signed up with — the account, bookings, and any calendar events will be removed. You can also cancel individual upcoming bookings directly on the site (My bookings), which deletes the corresponding calendar event.

8. Contact

For questions about this policy, contact Martin Slaby at info@martinslaby.cz, or via LinkedIn or GitHub.