Privacy policy
Last updated 14 September 2026
This is the privacy policy for nickgulic.com. I've written it in plain words because you're a person, not a lawyer. It covers what this site collects, why, who it goes to, and what you can do about it.
Who I am
The site belongs to Nick Gulic, based in Sydney, Australia. For anything in this policy, I'm the person responsible for your data (the "controller", if you're in Europe or the UK). Email me at privacy@nickgulic.com.
What I collect, and why
The newsletter
If you sign up to the idgaf newsletter, I collect your first name and your email address. That's it. I use them to send you the newsletter and to address you by name. The legal basis is your consent: you asked for it, and you confirm it by clicking the link in the email that follows. You can withdraw that consent any time by unsubscribing from any email, which takes one click.
The newsletter runs on beehiiv, which stores your details on my behalf and records the usual email stuff: whether an email was delivered, opened, or a link was clicked. beehiiv is a US company, so your details are stored in the United States. beehiiv commits to the standard safeguards for that transfer. Their policy is at beehiiv.com/privacy.
The community and mentoring
The idgaf community is a paid membership run through beehiiv, and mentoring sessions are booked through TidyCal. If you buy either, those services collect what they need to take your order and payment: your name, email, and payment details. Payment details go straight to the payment processor. I never see or store your card. The legal basis is the contract you're entering with me. Their policies are at beehiiv and TidyCal.
Visiting the site
The site is hosted by Vercel. Like any host, its servers log the basics of each request: your IP address, browser type, the page requested, and the time. Those logs exist for security and to keep the site running, which is a legitimate interest, and they're kept only as long as Vercel needs them for that. Vercel's policy is at vercel.com/legal/privacy-policy.
I use Google Analytics to see how many people visit and which pages they read. It's aggregate stuff: page counts, rough location by country, what kind of device. Outside the EU and UK it sets a cookie so it can count you once rather than five times. In the EU and UK it runs without cookies and only gets the rough counts. I don't use it to identify you, I don't build profiles, and none of the advertising features are switched on. Google's policy is at policies.google.com/privacy.
Videos
The testimonial videos are hosted on Vimeo and only load when you press play. I've set them not to track you, but Vimeo still sees the request and applies its own policy, which is at vimeo.com/privacy.
The game
Yes, there's a game. If you turn its music off, the site remembers that setting in your browser's local storage. That never leaves your device and you can clear it from your browser any time.
Cookies
This site doesn't use advertising or tracking cookies, and there's no Facebook pixel. The only things stored in your browser are the game setting above and, outside the EU and UK, the Google Analytics cookie that counts a visit once rather than five times.
Who else sees your data
Only the services that run the site for me, listed above: beehiiv, TidyCal, Vercel, Vimeo, and Google Analytics. Each only gets what it needs to do its job. I don't sell your data, rent it, or hand it to anyone else, unless the law makes me.
How long I keep it
Your newsletter details stay until you unsubscribe or ask me to delete them. Purchase records stay as long as tax law says they have to, which in Australia is seven years. Server logs and analytics are aggregated or deleted on the schedules those services run.
Your rights
Wherever you are, you can ask me to:
- tell you what I hold about you, and give you a copy;
- correct it if it's wrong;
- delete it;
- stop using it for a particular purpose, or stop altogether;
- send it to you or another service in a usable format.
Email privacy@nickgulic.com and I'll sort it within a month. If you're in the EU or UK and you think I've got this wrong, you can also complain to your local data protection authority. In Australia that's the Office of the Australian Information Commissioner.
Links to other sites
I link out to other places now and then. They have their own policies and most of them track more than I do. Keep that in mind when you click.
Kids
The site isn't aimed at anyone under 16 and I don't knowingly collect their details. If that's happened, email me and I'll delete them.
Changes
If this policy changes, the date at the top changes with it. Anything big and I'll say so in the newsletter.