--- title: "Privacy policy — Tali Režun" url: "https://talirezun.com/privacy" description: "How talirezun.com handles your data: no tracking cookies, cookieless analytics, sign-in, members data, inquiries, email, AI-assisted triage and your rights." updated: "2026-10-21T18:38:43.033Z" --- # Privacy Privacy policy Last updated: 19 October 2026 Version 1.2 This policy explains what personal data talirezun.com processes, why, for how long, who helps us process it, and what rights you have. The short version: there are no tracking or advertising cookies on this site, page analytics are cookieless, and we only store what you give us when you send an inquiry or sign in to the members area. ## Who is responsible The controller of your personal data is Skupina Svetilnik d.o.o. (Lighthouse Group Ltd), the company Dr. Tali Režun works through. In this policy "we" and "us" mean that company; "Tali" means Dr. Tali Režun. Registered name: Skupina Svetilnik d.o.o. (Lighthouse Group Ltd) Address: Cesta 24. junija 25, 1000 Ljubljana, Slovenia, European Union Registration number: 6345379000 VAT ID: SI26028921 Contact: via [Inquire](https://talirezun.com/inquire) There is no public email address. To reach us about privacy, use the [inquiry form for other requests](https://talirezun.com/inquire/other). ## The short version - No tracking or advertising cookies, no Google Analytics, no tag managers, no cross-site identifiers. That is why there is no cookie banner. - Reading the site requires nothing from you. Your browser connects to Cloudflare, which hosts the site. - If you send an inquiry, we store what you write and use it to reply. We keep it for 12 months unless we start working together. - If you are invited to the members area, we store your email address, your access rights and a record of which materials you open. You can delete your account yourself. - We never sell your data and never use it for advertising. ## Visiting the site When you open a page, your browser sends the usual technical information (IP address, browser type, requested address, referring page) to Cloudflare, which hosts and delivers the site. Cloudflare uses it to deliver the page and protect the site against attacks. Our own application logs do not record IP addresses; where an email address appears in an error log, it is masked. Cloudflare keeps operational logs for a short period under its own data processing terms. Legal basis: our legitimate interest in running a secure website (Article 6(1)(f) GDPR). ## Analytics We want to know which pages and links are useful, not who you are. - **Page views.** We may use Cloudflare Web Analytics, which counts visits without cookies, without storing IP addresses and without fingerprinting. - **Link clicks and downloads.** When you follow a tracked link to an article or publication (addresses that start with /go/), open a PDF hosted on this site, or use a "Subscribe on Substack" button (addresses that start with /out/), we count it. We keep daily totals per publication and channel only. A separate event stream also records the referring website's domain and your country as estimated by Cloudflare. To keep automated traffic out of the totals, the request's browser type is checked at that moment and not stored. Nothing here records your IP address or any identifier. Legal basis: legitimate interest in understanding, in aggregate, how the site is used (Article 6(1)(f) GDPR). ## Cookies and local storage This site sets no tracking, advertising or analytics cookies. What it does use: - **Sign-in session cookie.** Only if you sign in to the members area (or the admin area). It keeps you signed in for up to 30 days, is HTTP-only and is sent only to this site. During a Google sign-in, a short-lived technical cookie also protects the sign-in step. Signing out removes the session. - **Cloudflare security cookies.** Cloudflare may set strictly necessary cookies to tell people from bots and to block attacks. - **Theme preference.** If you choose light or dark mode in the footer, your choice is saved in your browser's local storage under "tr-theme". It never leaves your device. These are strictly necessary for a service you request, so no consent is required (Article 5(3) of the ePrivacy Directive, as implemented in Slovenian law). You can delete cookies and local storage in your browser settings at any time. ## Inquiries When you use the [inquiry form](https://talirezun.com/inquire), we store the details you enter: your name, your email address, your company if you give it, the type of inquiry and your answers (for example role, budget range, timeline and your message). We also store technical bookkeeping such as when the inquiry was created and confirmed. **Email confirmation.** We send you a link to confirm your address. Until you confirm, Tali does not see the inquiry. Unconfirmed inquiries are deleted after 30 days. **Bot protection.** The form is protected by Cloudflare Turnstile and by rate limits. Rate limits use one-way hashes of your IP address and email address, which are deleted within about a day. **AI-assisted triage.** After you confirm, the inquiry is sent to an AI model, by default Anthropic's Claude, which suggests a category, a fit score, a short summary and a draft reply for Tali. We may instead use Google's Gemini models for the same task. The provider acts as our processor and receives only the inquiry. The AI output is a suggestion: Tali reads every confirmed inquiry and decides himself whether and how to answer. No decision with legal or similarly significant effect is made automatically. **Delivery.** The inquiry and the suggestion are emailed to Tali's business mailbox. You receive a short note that it arrived. Any reply comes from Tali personally. **Inquiries from Lumina.** If you ask the Lumina assistant on this site to pass on an inquiry, Lumina sends us the name, email address and message you gave it, and the inquiry is handled as above. **Retention.** We delete inquiries 12 months after they were created, unless they led to a working relationship. In that case we keep them as long as the relationship and our legal obligations (for example accounting rules) require. Email correspondence with Tali is business correspondence and is kept on the same principle. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in answering inquiries (Article 6(1)(b) and (f) GDPR). ## Members area The members area holds materials for programs, cohorts and individual shares. Access is by invitation: the organiser of a program gives us the email addresses of participants. **What we store.** - Your email address and, if you sign in with Google, the name and profile picture address that Google shares with us, plus the technical tokens Google issues for the sign-in. - Your access rights: which program, cohort or item you may open, who granted it and when it expires. - Your sessions: when you signed in, the IP address and browser of the session, and when it expires. - An access record: which members materials you viewed or downloaded, and when. We do not record activity anywhere else on the site. - When an administrator changes access rights, that change is recorded in an internal audit log. **Signing in.** You sign in with a one-time link sent to your email (valid for 15 minutes, used once, stored only as a hash) or with Google. There are no passwords. The sign-in form is protected by Cloudflare Turnstile and by rate limits based on hashed identifiers. **Retention.** We keep your account until your access expires plus 12 months, and access records for up to 24 months. Accounts that never had any access are deleted once they have not been used for 12 months. **Deleting your account.** You can delete your account at any time at [/members/account](https://talirezun.com/members/account). This removes your account, your sessions, your linked Google sign-in and your access history. The invitation record stays with the organiser's roster, detached from your account, so that you can sign in again if you are still invited. To have the invitation removed too, contact us. Legal basis: performance of a contract (providing the materials you or your organiser signed up for) and our legitimate interest in protecting licensed materials (Article 6(1)(b) and (f) GDPR). ## Lumina chat When enabled, the chat assistant on this site is Lumina, built by Tali and operated by Lighthouse Group's Lumina service with EU data residency. What you type into the chat is processed by Lumina to answer you. Lumina has its own terms and privacy information at [luminawidget.xyz](https://luminawidget.xyz). Please do not enter sensitive personal data into the chat. ## Video, links and third-party sites - **Videos.** Embedded YouTube videos load only when you click play, from youtube-nocookie.com. Until then, nothing is requested from YouTube. Once you play a video, Google's privacy policy applies. - **Links.** The site links to other services, such as Substack, Medium, YouTube, LinkedIn and GitHub, and to projects run by related companies. When you follow a link you leave this site, and the other site's privacy policy applies. ## Service providers We use these providers to run the site. They process data on our behalf under data processing terms. - **Cloudflare** (hosting, content delivery, database, file storage, bot protection with Turnstile, analytics). The database is located in Western Europe and file storage is held in the EU jurisdiction. - **Resend** (transactional email: sign-in links, inquiry confirmations and notifications). - **Anthropic** (AI-assisted inquiry triage, by default) and **Google** (Gemini models as an alternative for the same task, and Google sign-in, which you choose to use). - **Lumina** (chat assistant, when enabled), operated by Lighthouse Group. We also use AI services to help prepare Library entries from Tali's own publications. No visitor data is involved in that work. ## International transfers We keep data in the EU where the service allows it. Resend, Anthropic and Google may process data outside the European Economic Area, in particular in the United States. Where that happens, transfers rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU-U.S. Data Privacy Framework. Cloudflare's global network may also process technical data outside the EU to deliver pages and stop attacks, under the same kind of safeguards. ## Your rights Under the GDPR you have the right to: - access the personal data we hold about you and get a copy; - have inaccurate data corrected; - have your data deleted; - restrict or object to processing based on our legitimate interests; - receive data you gave us in a portable format; - withdraw any consent you gave, without affecting earlier processing. **How to exercise them.** Use the [inquiry form for other requests](https://talirezun.com/inquire/other) and say what you would like us to do. Members can delete their account directly at [/members/account](https://talirezun.com/members/account). We may need to confirm that a request comes from you, usually by replying to the email address concerned. We answer within one month. **Complaints.** You can complain to a supervisory authority. In Slovenia that is the Information Commissioner (Informacijski pooblaščenec), [ip-rs.si](https://www.ip-rs.si). You can also complain in the EU country where you live or work. ## Children This site is not directed at children under 16, and we do not knowingly collect their data. ## Changes to this policy We update this policy when the site changes. The version number and date at the top show the current version. If a change affects how we use data you have already given us, we will tell members by email before it applies. --- HTML page: https://talirezun.com/privacy · Site index for agents: https://talirezun.com/llms.txt