HomeProjectsBlogAboutContactAccess

Privacy policy.

Last updated: 17 October 2026

1. Who is responsible

The data controller is Bartosz Bartosik, Bartosik.RUN IT Services, NIP 5732837148, REGON 388678804. For anything privacy-related: [email protected] or the form at /contact.

2. In short

No ads, no tracking pixels, no profiling and no cookies for statistics. I count visits with Cloudflare Web Analytics, which works without cookies and doesn't identify you (details in section 3). I don't sell or share data for marketing. Personal data is only collected when you give it to me: through the contact form, an access request, a newsletter sign-up or a comment.

3. Visiting the site

Traffic goes through Cloudflare (CDN and attack protection). Cloudflare and the web server process technical connection data, such as your IP address, browser and the address you request. This is used only to deliver and secure the site (Art. 6(1)(f) GDPR). Your IP is also held briefly in the server's memory to rate-limit form spam. It is never written to the database.

I collect visit statistics with Cloudflare Web Analytics. For this, your browser loads a small script from Cloudflare (static.cloudflareinsights.com). It uses no cookies or browser storage, doesn't track you across sites, builds no profile and doesn't store your IP address. All I see are totals: page views, referring sites, country, device and browser type, and page load times. The legal basis is my legitimate interest in knowing what gets read and whether the site is fast (Art. 6(1)(f) GDPR). Any content blocker can block it, and the site works exactly the same.

4. Cookies and browser storage

  • cc_cookie stores your cookie-banner choice for 6 months.
  • Cloudflare cookies (e.g. __cf_bm, cf_clearance) provide bot protection. They are strictly necessary and last from 30 minutes to a few days.
  • Cloudflare Turnstile on forms checks you're human, without cross-site tracking.
  • Local storage holds interface settings only: light/dark theme, whether the boot animation was shown, and your progress in the terminal's hidden commands. This never leaves your device.

Visit statistics (section 3) store nothing in your browser, so the "Analytics" category in the banner has nothing to switch on. If I ever add a tool that uses cookies, it will only run with your consent.

5. Contact form and access requests

  • Contact form: name, e-mail, subject and message. Access requests: name, e-mail, the chosen app and your reason.
  • Purpose: replying to you (Art. 6(1)(f) GDPR), and handling the request and sending access (Art. 6(1)(b)).
  • Submissions are deleted automatically after 12 months, or sooner on request.

6. Newsletter

  • Sign-up is double opt-in: nothing is sent until you click the link in the confirmation e-mail.
  • I store only your e-mail address, language and the confirmation date.
  • Unconfirmed sign-ups are deleted after 7 days.
  • Every issue has an unsubscribe link, and using it deletes your address immediately.
  • The legal basis is your consent (Art. 6(1)(a)), which you can withdraw at any time.

7. Comments

  • I store your name, e-mail and comment.
  • Your name and comment are public. Your e-mail is never shown and is used only for moderation.
  • A first comment from a new address waits for approval.
  • Comments stay as long as they're published. Ask and I'll delete yours along with your data.

8. Who receives data

  • Cloudflare, Inc.: CDN, security, Turnstile, visit statistics (Web Analytics). Data may be processed in the US under the EU-US Data Privacy Framework and standard contractual clauses.
  • OVH SAS (France, EU): the mail server that sends replies and the newsletter.
  • Discord Inc. (US): a private notification to me about a new message, request or comment (name, e-mail and an excerpt), under standard contractual clauses.
  • Hosting: the site and its database run on my own server in Poland. On the way, traffic passes through my own relay server (nginx) on a machine rented from Oracle Cloud Infrastructure (Oracle Corporation, EU data centre). It only forwards technical connection data and keeps nothing beyond short-lived logs.

9. Third-party content

  • Profile links (GitHub, LinkedIn, Spotify, Steam and others) lead to services with their own privacy policies.
  • The "live" tiles (homelab status, Spotify, Steam, GitLab) are fetched by my server. Your browser never contacts those services.
  • Hidden terminal commands can play a YouTube video (youtube-nocookie.com). Your browser connects to YouTube only if you type one of them.

10. Your rights

You have the right to:

  • access, rectify and erase your data, and to restrict processing;
  • data portability;
  • object to processing;
  • withdraw consent at any time.

Just e-mail [email protected]. You can also lodge a complaint with the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (ul. Stawki 2, 00-193 Warszawa).

11. Security

Connections are encrypted (HTTPS), the admin panel is accessible only to me, and backups run regularly.

12. Changes

If the site starts handling data differently, this page and the date at the top will change.