Privacy policy

Last updated: 3 October 2026.

Who is responsible

The controller is Bohdan Chornopolskyi, Warsaw, Poland. Email: bohdan@chornopolskyi.com. There is no data protection officer. This notice covers this website and the quote and review forms on it.

I process two kinds of personal data: what you send me by email or the form, and Google Analytics if you allow it. Nothing else is used to track you.

Hosting and server logs

Opening a page creates a server log: IP address, date and time, the address you requested, the referring page, and the browser string. I use that to keep the site available and to block abuse. The legal basis is legitimate interest (Art. 6(1)(f) GDPR). The logs are not used to identify you and are not combined with the quote form. The host keeps them for a short period and I do not keep a separate copy.

The form also keeps your IP address in server memory for up to 10 minutes so it cannot be flooded. That copy is not written to a database. Same legal basis.

The typefaces are part of this website. Opening a page does not contact Google Fonts. There are no embedded maps, videos or social plugins. Links to GitHub and LinkedIn are ordinary links. Nothing is sent to them until you follow one.

Emails and the quote form

If you email me, or send the quote or site-review form, I process the details you type: name, email address, business name if you add one, website address, your message, and the package and options you pick.

I use them to answer you, send the quote or the review, and to take the steps before a contract. The legal basis is Art. 6(1)(b) GDPR. You do not have to send the form. If you don't, I cannot reply.

Delivery goes through Resend (resend.com), a company in the United States. Resend processes the message only to deliver it. The transfer outside the EEA is covered by the EU standard contractual clauses in Resend's data processing terms. I do not use your address for a newsletter, and I do not sell or rent it.

A quote that does not become work is deleted within 3 years of the last message. If we work together, I keep the correspondence for the life of the contract and then for as long as Polish accounting rules require, which is typically 5 years.

Cookies

A cookie is a small file stored on your device. Nothing is stored until you choose. After you press Reject, Accept, or Save, one necessary cookie remembers that choice. Google Analytics cookies are set only if you accept analytics.

• Necessary. Name: consent. First party. Lasts 180 days. Stores the consent version, whether analytics is allowed, and the time you chose. It is not used to track you across sites. Legal basis: the storage is strictly necessary to provide a service you asked for, so it does not need consent under the ePrivacy rules.
• Analytics. Off until you accept. See the next section. You can reject analytics and the rest of the site still works, including the quote form.

Reject and Accept on the banner do the same amount of work. You can change your mind at any time from Cookie settings in the footer. Withdrawing consent does not affect processing that already happened.

Google Analytics

If you accept analytics, the browser loads Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. I am the controller. Google is the processor. Their terms are here and their privacy policy is here.

The cookies are _ga and _ga_ followed by the measurement id. They can last up to 2 years. They distinguish one browser from another.

Analytics records pages you open, a rough location derived from the IP address, device and browser, how you arrived, and when. If you accept, it also records which quote, review and email links you use, and whether you start or send the quote form. Your name, email address and message are not sent to Google. Google Analytics 4 does not store the full IP address. Advertising features and Google signals are off. I do not use this data to advertise to you, and I do not build a profile for that purpose.

The legal basis is your consent (Art. 6(1)(a) GDPR), together with the rule that information may be stored on your device only with consent (German TDDDG §25, and the Polish telecommunications rules that implement the ePrivacy Directive).

Google Analytics 4 keeps event data for 2 months by default, and this site is meant to stay on that period. If you withdraw consent, this browser stops sending hits and the analytics cookies are deleted here. Ask me if you want data already stored at Google deleted as well, where it can still be tied to you.

Google may process the data in the United States. Google LLC is certified under the EU-US Data Privacy Framework (dataprivacyframework.gov), and the Analytics terms include standard contractual clauses.

Your rights

You can ask for access, correction, deletion, restriction, and a copy of the data you gave me. You can object to processing based on legitimate interest. You can withdraw analytics consent at any time, with effect for the future. You can also complain to a supervisory authority.

Write to bohdan@chornopolskyi.com. I will answer within one month.

The authority for my establishment in Poland is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl. You may also complain to the authority where you live or work.

I do not make decisions about you based solely on automated processing, and I do not use the data for profiling that produces legal effects.

Children

This site is not aimed at children under 16, and I do not knowingly collect their data.

Changes

If what I collect or why I collect it changes, I will update this page and change the date at the top.