Privacy notice

Controller and contact

Methodfield is an independent educational and applied methods project operated by Nikolai Babakov in Portugal. Nikolai Babakov is the controller of personal data processed by the service. No data protection officer has been appointed.

Current service

Methodfield is a live public educational service. It does not sell subscriptions, advertising or commercial services. This notice describes the data handling that applies from the effective date shown above. Material changes will be reflected on this page with a new effective date.

Purposes and legal bases

Local account, authentication and private workspace data are processed to provide the service requested under these terms (GDPR Article 6(1)(b)). Security, abuse prevention and aggregate service measurement rely on the controller’s legitimate interests in operating a safe and understandable service (Article 6(1)(f)). Optional browser identifiers and Google Analytics require consent (Article 6(1)(a)), which can be withdrawn at any time. Data may also be processed where required by law (Article 6(1)(c)).

Data principles

Methodfield is designed to minimise personal data. Public content and Method Finder recommendations work without an account. Saved working plans are private by default.

First-party audience analytics

Public page views and controlled product events are counted on the Methodfield server without storing IP addresses, user-agent strings or raw referrer URLs. A visitor may optionally allow a random browser identifier, rotated after 30 days, and a browser-tab session identifier. These identifiers are not used on other websites.

Google Analytics on public pages

Google Analytics loads only after explicit permission and is disabled on authenticated workspace pages. It receives public page paths and titles, controlled event names and properties, and the technical signals Google Analytics normally processes, such as approximate location and browser or device information. Analytics and advertising storage default to denied; permission grants analytics storage while advertising storage and personalisation remain disabled. Methodfield configures Analytics cookies to expire after 30 days and never sends form values, email addresses, company details, free-text searches or workspace content.

Recipients and international processing

Personal data is not sold. It is disclosed only to infrastructure and network providers needed to operate Methodfield, including Cloudflare where traffic passes through its network, and to Google Analytics after consent. Some providers may process data outside Portugal or the European Economic Area under the safeguards applicable to their services. Details of current providers and safeguards can be requested from the controller.

Retention

Account and workspace data is retained while the account is active. When an account is deleted, associated application records are deleted or anonymised in the live database and may remain in operational backups until the 14-day backup rotation completes. Optional Methodfield browser identifiers and Analytics cookies expire after 30 days. Aggregate audience counts do not contain direct account identifiers.

Your rights

Depending on the circumstances and legal basis, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw analytics consent without affecting earlier lawful processing. Contact the controller using the address below. You may also lodge a complaint with Portugal’s Comissão Nacional de Proteção de Dados (CNPD).

Automated recommendations

Method Finder and other interactive learning features may generate recommendations from answers supplied in the current session. They do not make decisions that produce legal or similarly significant effects.

Data used by the service

• Local username and authentication identifiers.
• Private working plans, review dates and recorded outcomes.
• Private projects and structured template entries.
• Minimal product analytics without free-text business answers.
• Aggregate public page views and optional random visitor and tab-session identifiers.
• With permission, public-page and controlled interaction data processed by Google Analytics.

Controls and deletion

The service does not require an email address. Account deletion and other privacy requests are handled through the contact below and remove or anonymise associated application data, subject to backup rotation and legal retention duties. Workspace content is private by default.

Contact for privacy requests: [email protected]

Portuguese supervisory authority: Comissão Nacional de Proteção de Dados (CNPD)