Privacy Policy

This Privacy Policy describes what personal data the Operator processes in connection with the use of the Service, for what purposes, and what rights are available to Users. This document has been prepared with GDPR (EU 2016/679) in mind.

1. Data controller

The data controller is Szymon Skorupski (private person, KetusDev).

Last updated: 2026-08-04.

For any questions related to personal data processing, please contact: code.szymon@gmail.com

2. Categories of processed data

Depending on how the Service is used, we may process the following categories of data:

2.1. Contact form data

When a User submits a message through the contact form, we may process:

• full name,
• email address,
• phone number (optional),
• subject,
• message content.

2.2. Contact form security data

The contact form is protected by Turnstile (Cloudflare). During the verification process, the following may be processed:

• verification token,
• User IP address (for verification purposes).

2.3. Analytics data (only after consent)

If the User consents to analytics cookies, we may process usage information for statistical purposes, to the extent defined by the analytics provider configuration.

2.4. Cookies and language preferences

The Service may store cookies related to language handling (i18n) and cookies used to remember analytics consent choices.

3. Purposes of processing and legal bases

We process data in particular for the following purposes:

3.1. Handling a contact request

The legal basis is the handling of the request and response to the User, in accordance with applicable GDPR rules.

3.2. Protecting the contact form against abuse

The legal basis is the legitimate interest of the Controller in ensuring security and preventing abuse, in accordance with GDPR.

3.3. Analytics

Analytics is enabled only after consent is given through the cookie banner. The legal basis is consent under Article 6(1)(a) GDPR.

4. Recipients of data (processors)

To the extent necessary to achieve the purposes described above, data may be entrusted to processors acting on behalf of the Controller.

Within the Service, we may use the following services:

• Cloudflare — Turnstile verification and contact form protection,
• Resend — email delivery for messages sent through the contact form,
• Plausible (self-hosted) — analytics, only after consent.

5. Transfers outside the EEA/UK

If service providers process data outside the EEA/UK, appropriate safeguards are applied where required by law (for example, standard contractual clauses).

6. Retention

We retain data as follows:

• contact form data — until the request is handled and for the period necessary for potential claims,
• security-related data — for the period necessary to verify and protect the form,
• analytics data — according to the provider configuration and the consent given,
• cookies — until consent is withdrawn or cookies are deleted according to browser settings.

7. Your rights

You may have the following rights, depending on the legal basis and applicable law:

• access to your data,
• rectification,
• erasure,
• restriction of processing,
• data portability (where applicable),
• objection,
• withdrawal of consent for analytics at any time in accordance with the Cookies Policy.

To exercise your rights, contact the Controller at: code.szymon@gmail.com

You may also lodge a complaint with the competent supervisory authority for data protection.

8. Security

We apply technical and organizational measures appropriate to the level of risk in order to protect personal data against unauthorized access, alteration, or disclosure.

In particular:

• we use contact form protection mechanisms (Turnstile / Cloudflare),
• we validate submitted input on the server side,
• we apply rate limiting to the contact form endpoint,
• we use secure transmission (HTTPS), where available in the deployment environment.

9. Cookies

For more details about cookies and consent management, see the Cookies Policy.