Who's responsible
This is the personal site of Bart Grudka, based in Poland. I'm the controller of any personal data it collects. For anything privacy-related, write to bart@grudka.com.
Cookies
This site sets no cookies and stores nothing in your browser (no local storage, no session storage). There are no ad pixels, no Google Analytics, no embedded videos or third-party widgets. That's why you don't see a cookie banner.
The portrait that follows your cursor runs entirely in your browser. Nothing about your mouse movement is sent anywhere.
Visitor statistics
I use Vercel Web Analytics to see which pages get read. It counts page views, the referring site, country, device type, browser and operating system. It doesn't use cookies. Visitors are told apart by a hash of the request that resets every day, so nobody can be followed across days or across other websites. I only see aggregated numbers, never individual visitors.
Legal basis: my legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR).
Server logs
The site is hosted by Vercel. Like any web server, it briefly processes your IP address, browser details and the page you asked for, so it can deliver the page and block abuse. These logs are kept for a short period set by Vercel and aren't used to identify you.
Legal basis: legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
There's no contact form here. If you email bart@grudka.com, I get your address and whatever you write. The address is forwarded by Cloudflare Email Routing to a Google Workspace mailbox.
I use it only to reply. No newsletter, no marketing lists, nothing sold or shared.
Legal basis: my legitimate interest in answering messages (Art. 6(1)(f) GDPR), or steps you asked for before a possible contract (Art. 6(1)(b) GDPR).
How long: messages that don't lead to working together are deleted within 2 years of our last exchange.
Who processes data for me
- Vercel Inc. (USA): hosting, server logs, visitor statistics.
- Cloudflare, Inc. (USA): DNS and email forwarding.
- Google (Google Workspace): email storage.
These companies are based in the USA. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Links to LinkedIn, 99designs and other sites take you to services with their own privacy policies.
Your rights
You can ask for a copy of your data, have it corrected or deleted, restrict or object to its use, and get it in a portable format. Email bart@grudka.com and I'll reply within 30 days.
You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
No automated decisions or profiling happen on this site.
Changes
If what the site collects changes, this page changes first. The date at the top shows the latest version.