Privacy

Privacy policy

Last updated:

Data controller

The controller of personal data collected on this site is me, Mateusz Ziemniewicz. For privacy enquiries please use the contact form.

What data I collect

  1. Visit statistics (Google Analytics 4) — only with your explicit consent expressed via the cookie banner. Collected: anonymised IP address, device and browser type, country / region, pages visited, basic interactions (clicks, scroll, time on page). A pseudonymous identifier stored in the cookies _ga and _ga_4THQBPM2M5.
  2. Contact-form content — if you submit a message via the form: your name, email address and message body. The data is delivered to my mailbox via the Resend service.
  3. Anti-spam (Cloudflare Turnstile) — when you submit the form, your IP address and basic browser fingerprint are sent to Cloudflare solely to verify you are not a bot. Cloudflare's privacy policy.

Purpose and legal basis

  • GA statistics: your consent — GDPR Art. 6(1)(a).
  • Contact form: necessary to handle your enquiry — GDPR Art. 6(1)(b) or (f) (legitimate interest).
  • Anti-spam: legitimate interest in protecting the service from abuse — GDPR Art. 6(1)(f).

Cookies

By default no cookies are set beyond technical ones strictly required for the site to work (interface state: nav-collapsed, cookieConsent). Only after you accept the banner are Google Analytics cookies (_ga, _ga_4THQBPM2M5) set. Until then GA runs in Consent Mode v2 — it sends anonymised "cookieless pings" without user identifiers.

Withdrawing consent

You can withdraw consent at any time. The simplest way: in your browser settings, clear this site's data (cookies + localStorage) — the banner will appear again and you can choose differently. Or manually remove the cookieConsent key from localStorage in DevTools.

Retention

  • GA data: 14 months in the Google Analytics dashboard by default, after which it is aggregated.
  • Form messages: kept in my mailbox for as long as needed to handle the matter they concern.

Your rights

Under the GDPR you have the right to: access your data, rectify it, request erasure, restrict processing, object to processing, and data portability. You also have the right to lodge a complaint with the Polish data-protection authority (uodo.gov.pl) or your local supervisory authority.

Recipients and transfers outside the EEA

I use the following providers as data processors; all are based in the USA, and transfers occur under the EU Standard Contractual Clauses (SCCs) approved by the European Commission:

  • Google LLC — Google Analytics.
  • Resend (Resend Labs Inc.) — email delivery service for the contact form.
  • Cloudflare, Inc. — Turnstile (anti-spam) and CDN delivery. The site is hosted on Netlify (USA), also under SCCs.

Contact

For privacy matters and GDPR requests, write via the contact form.

Changes to this policy

The current version is always at this URL. The last-updated date is shown at the top of the page.