Privacy.
Plain version: this site sets no cookies, runs cookieless analytics, and processes the minimum visitor data required to keep it online and improve it. The detail below explains exactly what, why, and your rights under EU GDPR.
This site is operated by Kamil Tomczuk, an independent freelance web developer based in Warsaw, Poland. For any privacy-related question or to exercise the rights listed below, contact support@professorkt.tech.
Under GDPR, that makes Kamil Tomczuk the data controller for visitor data on this site.
- Server logs. When you load a page, the host (Vercel) records the request: IP address, user agent, requested URL, timestamp, response code. Standard for any website — needed for delivery, security and abuse prevention.
- Vercel Analytics. Page views, country, device class, referrer. Visitor IDs are hashed server-side. No cookies are set. No cross-site tracking.
- Vercel Speed Insights. Anonymous Web Vitals (load time, interaction latency). Used to keep the site fast. Cookieless.
- Email you send. If you write to the address above, the message and your email address are processed to reply and, if relevant, scope a project.
That's the full list. There are no marketing pixels, ad networks, session recording, or third-party trackers on this site.
- Legitimate interest (Art. 6(1)(f) GDPR) — for hosting logs, cookieless analytics and performance monitoring. The interest is keeping the site online, secure and reasonably fast. The processing is low-impact and cannot identify you personally.
- Pre-contractual / contractual necessity (Art. 6(1)(b) GDPR) — when you email about a project, replying to and scoping that engagement is necessary to take steps at your request before entering a contract.
The following service providers act as data processors:
- Vercel Inc. — hosting, server logs, Analytics, Speed Insights.
- Sanity.io — content management. Content is fetched server-side, so Sanity does not see visitor IPs.
- Email provider — used to receive and reply to messages sent to the address above.
Each provider is bound by their own data processing terms and acts only on documented instructions.
Some processors (Vercel, Sanity) are based in or operate infrastructure in the United States. Where personal data is transferred outside the EEA, transfers rely on the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.
- Server logs — typically up to 30 days, then rotated.
- Analytics aggregates — retained per Vercel's product defaults.
- Email correspondence — kept for the duration of the conversation and a reasonable period after, then deleted unless required for accounting or legal reasons.
Under GDPR you have the right to:
- access the personal data held about you,
- request correction or erasure,
- restrict or object to processing,
- data portability where applicable,
- lodge a complaint with the Polish supervisory authority (UODO · uodo.gov.pl).
To exercise any of these, email support@professorkt.tech. There's no automated decision-making or profiling on this site.
None. This site does not set tracking, advertising or analytics cookies. If that ever changes, this page will be updated and a consent prompt added before any non-essential cookie is placed.
If the way data is handled changes, this page is updated and the date at the top is revised. Material changes will be reflected here before they take effect.