Privacy Policy

The data controller is Dzmitry Astapovich, an individual based in Warsaw, Poland.

For privacy questions, contact [email protected].

Contact details you submit through the contact form: your name, email address, and message. Giving them is voluntary, but without them I cannot reply.

If you write to me directly by email, Telegram, or WhatsApp, I use your message for the same purposes, and the company providing that service also processes it under its own terms.

With your consent, Umami analytics: the address of each page you view (with no query parameters other than campaign (UTM) tags) and its title, the referring site, screen size, browser language, and these interactions: whether you reach the end of a page (90% of it on screen) and clicks on contact links (email, LinkedIn, Telegram, WhatsApp, Behance), with the page you were on.

Your IP address and browser user agent reach Umami with each request. They are used to work out your approximate location (country, region, city), browser, operating system, and device type, and a visitor identifier that changes every month. The IP address itself is not stored.

With your consent, Microsoft Clarity: how you use the pages (clicks, taps, mouse movement, scrolling, and the page content you see), recorded as heatmaps and session replays; the names of these interactions: whether you reach the end of a page (90% of it on screen) and clicks on contact links (email, LinkedIn, Telegram, WhatsApp, Behance), with the page you were on; your IP address, from which Microsoft works out your approximate location; your device, browser, and referring site; and a pseudonymous Clarity ID kept in the _clck cookie, which recognizes your browser on later visits for up to a year.

Basic technical data normally processed by hosting and security providers, such as request time, requested URL, IP address, and browser/device metadata.

Your name, email address, and message are never sent to analytics.

The contact forms are masked in your browser before Clarity records a page, so what you type there is not recorded.

To answer inquiries and manage potential client collaboration.

To understand how many people visit, which pages and portfolio cases they view, and where they stop reading.

To keep the website secure and reliable.

Contact form processing is based on taking steps before a potential contract and legitimate interest in replying to inquiries.

Analytics is based on your consent (Art. 6(1)(a) GDPR, and Art. 399 of the Polish Electronic Communications Law for storing and reading information on your device). It stays off until you accept it, and withdrawing consent does not affect processing that took place before.

Umami and Clarity are accepted separately: “Statistics only” allows Umami without Clarity.

Strictly necessary technical processing is based on legitimate interest in operating and securing the website.

Hosting: Vercel Inc. (USA) serves this website and runs the contact form, and Cloudflare, Inc. (USA) provides its DNS, content delivery, and security. Both process technical request data such as IP addresses and user agents; transfers to the USA rely on the EU-US Data Privacy Framework.

Contact form: your name, email address, and message are forwarded to a Telegram bot, and I read and answer them in Telegram. Telegram is provided by Telegram Messenger Inc., which is established outside the EEA; its EU representative is the European Data Protection Office (EDPO), Avenue Huart Hamoir 71, 1030 Brussels, Belgium. Under its privacy policy, the data of users who signed up in the EEA is stored in data centers in the Netherlands, and transfers within the Telegram group rely on the European Commission's Standard Contractual Clauses.

Analytics (only with your consent): Umami Cloud, provided by Umami Software, Inc. (USA) as my processor, with data stored in Umami's EU region. Umami itself and some of its subprocessors are US companies; these transfers rely on the European Commission's Standard Contractual Clauses (Decision (EU) 2021/914) in Umami's data processing agreement.

Heatmaps and session replays (only with your consent): Microsoft Clarity, provided to website owners in the EU by Microsoft Ireland Operations Limited. Microsoft is a separate controller of the data Clarity collects and also uses it for its own purposes, including to provide Microsoft Advertising, as described in the Microsoft Privacy Statement; it may transfer the data to Microsoft Corporation in the USA, relying on the EU-US Data Privacy Framework and Standard Contractual Clauses. This site always tells Clarity to deny advertising storage, so Clarity does not set or sync Microsoft advertising cookies here; that does not limit how Microsoft uses the data it collects.

I keep contact messages only as long as I need them to reply and to handle any collaboration that follows, unless they become part of a contract or accounting records, which are kept as long as the law requires.

Umami keeps analytics data for 6 months.

Microsoft Clarity keeps session replays for 30 days (favorited replays and a random sample for up to 9 months), and heatmaps and aggregated statistics for 9 months. Data Microsoft uses for its own purposes is kept as the Microsoft Privacy Statement describes.

Vercel and Cloudflare keep request logs only for the short periods set by their own retention policies.

Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent.

Where I rely on legitimate interests (replying to inquiries, keeping the site secure), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You can withdraw analytics consent at any time in the Cookie Policy.

To make a request, email [email protected].

I make no automated decisions about you, and I do not profile you.

You can also lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw, Poland).