Privacy policy
Last updated: 12 September 2026
In short: this site uses no analytics, tracking, advertising or cookies. Nothing is stored on your device unless you choose a language or switch the theme.
Data controller
The controller of the personal data processed on this site is Oleksii Borovyk. This site belongs to my sole proprietorship registered in Poland (jednoosobowa działalność gospodarcza). The registration details are given below. If you have any questions about how your personal data is processed, please write to contact@borovyk.dev.
OLEKSII BOROVYK NIP 6762677371 Magazynowa 49A/2, 33-395 Chełmiec
Data processed when you open a page
To deliver a page to your browser, the server needs to know where to send it. So when you open the site, the hosting provider receives your IP address, information about your browser (user agent) and the time of the request. No other data is collected. Consent is not required for this processing, because the site cannot be displayed without this data. I do not use this data to identify visitors.
| Data | Purpose | Legal basis | Retention period |
|---|---|---|---|
| IP address, browser information (user agent), time of the request | Delivering the requested page and protecting against abuse | Legitimate interests (Art. 6(1)(f) GDPR): delivering the page to you and protecting the site against abuse | Full HTTP request logs are not stored. Security event records containing IP addresses are available in the Cloudflare dashboard for 24 hours; aggregated traffic statistics cover the last 30 days |
Email correspondence
If you write to contact@borovyk.dev, I receive your email address, the content of your message and any other data you include in it. I use this data only to reply to you and to continue the correspondence. The mailbox is operated by Zoho Corporation B.V., based in the Netherlands.
| Data | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Email address, message content, any data included in the message | Replying to your message and continuing the correspondence | Legitimate interests (Art. 6(1)(f) GDPR): replying to your message; where the correspondence concerns entering into a contract, Art. 6(1)(b) GDPR | If we do not start working together: 12 months after the last message. If we do: for the duration of our work together and until the limitation period for related claims expires |
Data stored on your device
Nothing is stored on your device unless you choose a language or switch the theme. If you do, your browser stores that choice locally. This record is not sent to me or to any third party. You can delete it by clearing the site data in your browser settings.
| Name | Set when | Purpose | Retention period | Consent required |
|---|---|---|---|---|
preferred-lang |
You press EN, UA or PL | Stores the selected language | Until you clear the site data in your browser | No |
preferred-theme |
You press the theme switch | Stores the selected theme (light or dark) | Until you clear the site data in your browser | No |
There is no consent banner on this site. The site does not use cookies, and both localStorage entries are created only when you choose a language or theme yourself. Consent is not required for such storage, because it is necessary to provide a service you have requested (Article 399(3)(2) of the Polish Electronic Communications Law, Prawo komunikacji elektronicznej).
Recipients of data
Two companies process data. Cloudflare, Inc., as the hosting provider, serves the site through its network of data centres. Cloudflare, Inc. is registered in the United States; transfers of data to the US take place under the EU-U.S. Data Privacy Framework and the European Commission's standard contractual clauses in Cloudflare's data processing agreement. The agreement is published at cloudflare.com/cloudflare-customer-dpa. Zoho Corporation B.V., based in the Netherlands, operates the contact@borovyk.dev mailbox. Zoho stores data in its EU data centre and may transfer it outside the EEA, including to the US, under the European Commission's standard contractual clauses. A copy of the agreements under which Zoho transfers data can be requested from legal@zohocorp.com. There are no other recipients. Fonts are served from this domain, not from Google's servers. Third-party sites (GitHub, LinkedIn and the press articles linked here) open only when you click a link to them.
Retention periods
Your language and theme choices remain in your browser until you delete them. If we do not start working together, the correspondence is deleted 12 months after the last message. If we do, it is kept for the duration of our work together and until the limitation period for related claims expires. Cloudflare does not store full HTTP request logs by default; they can be enabled only on the Business and Enterprise plans, and I use the free plan. Two kinds of data are available to me in the Cloudflare dashboard: sampled records of requests that triggered security rules, including the IP address, browser information and country, available for 24 hours; and aggregated traffic statistics (request counts by country and page) for the last 30 days. Cloudflare's own retention periods are set out in its privacy policy.
Your rights
Under the GDPR you have the right to access your personal data, to have it rectified or erased, to restrict its processing and to object to processing. Where the correspondence concerns entering into a contract, you also have the right to data portability. The site has no user accounts or profiles and keeps no browsing history. These rights therefore apply mainly to correspondence: if you write to contact@borovyk.dev, I store your email address and the content of your message. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), via uodo.gov.pl.
Providing data and automated decisions
Providing data is voluntary and is not a statutory or contractual requirement. Without your IP address the server cannot deliver the page to you; without your email address I cannot reply to your message. I do not make automated decisions about you and do not carry out profiling.
Changes to this policy
If analytics, a contact form or third-party embedded content (such as a video, map or widget) is ever added to the site, this policy will be updated before the change takes effect.