Privacy policyPrivacy policy

This website is the personal portfolio of Stanislav Romaniv, a developer based in Kraków, Poland (“I”, “me”, “my”). This policy explains what personal data I collect when you visit the site or contact me, why I collect it, how long I keep it and what rights you have.

I keep data collection to a minimum: the site has no user accounts, no advertising and no tracking cookies. I use cookie-free, aggregated visitor statistics to see which pages people read.

Stanislav Romaniv is the data controller for personal data collected through this website. You can reach me at stasrom17@gmail.com about anything in this policy.

• Personal data: information about a person who can be identified from it, such as a name or email address.
• Usage data: technical information sent automatically by your browser when you load a page, such as your IP address.
• Cookies: small files a website stores on your device.
• Service providers: companies that process data on my behalf, for example to host the website or deliver email.

Information you give me

When you use the contact form or email me, I receive:

• your first and last name;
• your email address;
• your store or company website, if you add it;
• your message and anything else you choose to share in it.

Usage data

Like any website, the server that hosts this site receives technical data when you visit: your IP address, browser type and version, the page requested and the date and time of the request. The hosting provider uses it to deliver the site and protect it from abuse. I don't use it to identify or profile you.

Visitor statistics

I use Vercel Web Analytics to count visits and see which pages are read, which country visitors come from, and what device, browser and referring website they use. It doesn't use cookies, and it doesn't identify you or follow you across other websites. I only ever see aggregated numbers, never individual visitors.

I also use Vercel Speed Insights, which measures how fast pages load and respond in your browser (for example, load time and layout shifts) along with the page, device type and browser. It also works without cookies and only reports aggregated performance data.

Cookies

This site doesn't set any tracking, advertising or analytics cookies, and it doesn't use third-party trackers. Fonts are served from this site's own domain, so your browser doesn't contact Google or any other font service.

I use your data only to:

• send you an automatic confirmation that your message arrived;
• reply to your message and discuss a project or a job opportunity;
• prepare a proposal or agreement if you ask for one;
• keep the website running, secure and free of spam.

If you're in the European Economic Area, the legal bases are: taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)) and my legitimate interest in answering enquiries and keeping the site secure (GDPR Art. 6(1)(f)).

I don't send newsletters or marketing emails, and I don't use your data for automated decision-making.

A few trusted companies process data on my behalf, only to provide their service:

• Vercel Inc. hosts the website, processes usage data to serve it and provides the cookie-free visitor statistics and performance measurements described above.
• Resend delivers messages sent through the contact form to my inbox, and the confirmation email to you.
• Google (Gmail) stores the emails I receive.

These providers may use your data only to perform their service for me, not for their own purposes.

The service providers above are based in the United States, so your data may be processed outside the European Economic Area. Where required, these transfers are covered by the safeguards the providers offer, such as the European Commission's Standard Contractual Clauses or certification under the EU-U.S. Data Privacy Framework.

I keep messages and contact details for as long as needed to reply and follow up, and for up to 24 months after our last contact. If we start working together, I keep project correspondence for as long as the law requires, for example for tax and accounting purposes.

You can ask me to delete your messages earlier at any time.

I don't sell, rent or trade your personal data. Apart from the service providers listed above, I share it only if:

• the law requires it, or a public authority makes a valid request;
• you ask me to, for example to introduce you to a collaborator.

The site is served only over HTTPS and the contact form has spam protection. Access to my inbox is protected with two-factor authentication. Still, no method of transmission or storage is 100% secure, so I can't guarantee absolute security.

If you're in the European Economic Area or the UK, you have the right to:

• access the personal data I hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how I process it;
• receive your data in a portable format.

To use any of these rights, email me at stasrom17@gmail.com. I'll reply within one month. You can also lodge a complaint with a data protection authority. In Poland that's the President of the Personal Data Protection Office (UODO).

If you live in California, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information I collect about you, to ask me to delete it and to opt out of its sale. I don't sell or share personal information, and I won't treat you differently for using your rights.

Under the California Online Privacy Protection Act (CalOPPA): you can visit this site anonymously, this policy is linked from every page with the word “Privacy”, changes are posted on this page, and you can update or delete your information by emailing me.

Do Not Track: since this site doesn't track visitors, it behaves the same whether or not your browser sends a Do Not Track signal.

This site links to projects and profiles on other websites, such as client stores, LinkedIn and GitHub. I don't control those sites and I'm not responsible for their privacy practices, so please read their policies.

This site isn't aimed at children under 16, and I don't knowingly collect their personal data. If you believe a child has sent me personal data, contact me and I'll delete it.

I may update this policy, for example if I add a new service to the site. Changes are posted on this page with a new effective date at the top.

Questions about this policy or your data? Email me at stasrom17@gmail.com.