> What this site collects, why, and for how long - form submissions, a newsletter signup, and cookie-free page-view counts. No ads, no tracking cookies.

Canonical: https://augustynglowacki.com/privacy-policy/

# Privacy Policy

What this site collects, why, and for how long. Written for what this site actually does, not copied from a template.

_Last updated: 16 August 2026_

## Data controller

I operate this site individually and act as the sole data controller for the processing described in this policy. Direct any request concerning this policy to the [contact form](/contact/#lead-form).

## Data collected

I collect only data provided directly. Submitting a form transmits a name, email address, and any message or project details entered, used to respond to the inquiry. Subscribing to the newsletter transmits an email address, confirmed through a double opt-in step before being added to the list. No other data is collected.

## Processors

- Resend - email delivery, including newsletter confirmations. Certified under the EU-US Data Privacy Framework.
- Cloudflare - hosting and request handling. Edge logs record IP address, user agent, and request timestamp, retained per Cloudflare's own schedule under its Data Processing Addendum.

Cloudflare Web Analytics measures page views and referrers without cookies, client-side identifiers, or cross-site tracking (see Cloudflare's ["What does privacy-first mean?"](https://blog.cloudflare.com/privacy-first-web-analytics/)). No advertising network or tracking pixel is used on this site.

## Legal basis

- Contract performance: responding to inquiries submitted through the site.
- Consent: newsletter delivery, and any active bot-verification check.
- Legitimate interest: maintaining security logs to operate the site and prevent abuse.
- Legal obligation: retention or disclosure required by applicable law.

## Retention

Inquiries are retained only until resolved, then deleted. Newsletter subscriptions are retained until unsubscribed. Cloudflare's edge logs are retained per its own schedule, set out in its Data Processing Addendum.

## Your rights

Residents of the EEA, the UK, or Switzerland have the right under GDPR to access, correct, delete, or export their data, to object to or restrict its processing, and to withdraw consent at any time. Submit such a request through the [contact form](/contact/#lead-form).

## Cookies

This site sets no tracking or advertising cookies. Cloudflare Turnstile, when active on a form, may set a short-lived cookie solely to distinguish human visitors from automated traffic.

## Children

This site is not directed at children under 13, and data is not knowingly collected from anyone in that age group. Report any such instance through the [contact form](/contact/#lead-form) for deletion.

## Policy changes

This policy will be updated to reflect changes in data practices, with the revision date above updated accordingly. Continued use of the site after a change constitutes acceptance of the update.

This policy is based on this site's actual data practices. It does not constitute legal advice and has not been reviewed by an attorney.