Privacy policy

Who handles your data

Bartosz Sławecki is the controller of personal data collected through this website, including its Cloudflare preview address. For privacy questions or requests, email bartosz@nawczoraj.com.

Messages and meeting requests

The form collects your name, email address, message and browser timezone. A meeting request also includes your preferred date and time. The site records the submission time and request status. These details are stored in a dedicated Cloudflare D1 database and may be sent to my email inbox through Cloudflare’s email service so I can respond.

I use this information to answer your enquiry and arrange a conversation. For enquiries about working together, processing is necessary to take steps at your request before a contract (GDPR Article 6(1)(b)). For other correspondence, my legitimate interest is responding to messages (Article 6(1)(f)). Providing the requested details is voluntary, but I need them to handle the form submission. They are not used for mailing lists or advertising.

Technical data and abuse prevention

Cloudflare hosts and protects the site and processes technical request data, which can include your IP address, browser information and requested URL. The form uses a salted hash derived from your IP address to limit repeated submissions. These rate-limit records expire after 15 minutes and are cleared on a subsequent submission. This processing serves the legitimate interest of keeping the site secure and available.

External services

The contact portrait loads from GitHub and video thumbnails load from YouTube’s image service. Your browser contacts those providers to retrieve the images, sharing technical information such as your IP address. GitHub activity is fetched by the site’s server. Videos are not embedded: opening a recording takes you to YouTube. Other external links take you to the respective provider’s website.

Cloudflare and external providers may process data outside the European Economic Area. Cloudflare describes its transfer safeguards, including standard contractual clauses, in its Data Processing Addendum. See also Cloudflare’s privacy policy, GitHub’s privacy statement and Google’s privacy policy.

Cookies and retention

The website does not add analytics or advertising cookies, and form drafts are not saved to browser storage. Infrastructure providers may use necessary security mechanisms.

Correspondence is retained for as long as needed to handle the enquiry, related follow-up and any applicable legal obligations or claims. The appropriate period depends on whether the conversation leads to an ongoing working relationship. You can request deletion using the email address above. Provider security logs and email copies are subject to their respective retention settings.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. Contact me at the address above. You can also complain to Poland’s Personal Data Protection Office (UODO) or your local supervisory authority. The site does not use profiling or automated decisions with legal or similarly significant effects.