Privacy policy
I care about your privacy. This site uses necessary data stored in your browser and a contact form. I turn on Google Analytics only with your consent — you can decline it or withdraw it at any time.
01 Data controller
The controller of your personal data is Kacper Szymański, the owner of this website. For data protection matters, contact me through the contact form on the site.
02 What data do I collect?
I only collect data you provide voluntarily through the contact form:
- Name — so I can address you
- Email address — so I can reply to your message
- Message — what you want to tell me
- IP address — added automatically to the e-mail and used briefly to limit spam
Providing this data is voluntary, but without it I cannot reply to your message. In addition, the server hosting the site may keep standard technical logs (IP address, date and time, requested page, browser type).
03 Purpose of processing
I process your data solely to:
- reply to the message you sent through the contact form,
- keep the website secure.
The legal basis is my legitimate interest (Art. 6(1)(f) GDPR): handling correspondence that you start, and protecting the site against abuse. Analytics runs only on the basis of your consent (Art. 6(1)(a) GDPR). I do not make automated decisions and I do not profile you.
04 Browser storage and cookies
The site stores necessary data locally (localStorage) and — only after your consent — Google Analytics cookies. I do not use advertising cookies.
Stored in localStorage:
- lang — your chosen site language (en / pl)
- cookieConsent — your choice in the banner (all / necessary only), so I do not ask on every visit
- kac_live_v1 — the last fetched public data shown in the terminal on the home page (vulnerability info, weather, EUR/PLN rate), used as a fallback when a fetch fails
- desktop — the user name, picture and wallpaper you pick in the settings of the desktop on the home page (saved only if you change them)
None of these entries identifies you personally. They are necessary for the site to work, so under the Polish Electronic Communications Law they do not require consent. You can delete them at any time in your browser settings.
05 Analytics (Google Analytics 4)
If you click “accept all” in the banner, I load Google Analytics 4 (Google Ireland Limited / Google LLC) to understand how visitors use the site (pages visited, visit duration, approximate location, device and browser type). The legal basis is your consent (Art. 6(1)(a) GDPR).
Cookies set after consent:
- _ga — distinguishes users, valid for up to 2 years
- _ga_<ID> — keeps session state, valid for up to 2 years
Without consent these cookies are not set and the Google Analytics script is not loaded. You can withdraw consent at any time via the “cookie settings” link in the footer; also delete the _ga cookies in your browser settings. Google advertising features are turned off. Data may be processed by Google outside the European Economic Area, including in the USA — Google LLC participates in the EU-U.S. Data Privacy Framework.
06 Recipients and third-party services
I do not sell your data or pass it on for marketing. It is accessible only to the providers that technically run the site: the hosting provider (the server and its logs), the e-mail provider (Google — Gmail, where contact form messages arrive) and — only with your consent — Google Analytics.
When the page is displayed, your browser connects directly to public services to fetch resources and terminal data: Google Fonts (fonts), GitHub (CISA KEV list), NVD, SANS Internet Storm Center, Open-Meteo and Frankfurter. As with any connection, these services receive your IP address. I pass no other data about you to them.
07 Your rights
You have the right to:
- access your personal data,
- rectify inaccurate data,
- erase your data (right to be forgotten),
- restrict processing,
- data portability,
- object to processing,
- withdraw your analytics consent at any time (without affecting the lawfulness of earlier processing),
- lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw), or with the authority in your country.
To exercise these rights, contact me through the contact form.
08 Retention
I keep contact form data for as long as needed to answer your message, and then for the period required by law or until you object.
09 Security
I apply appropriate technical and organisational measures to protect the data I process, including an encrypted connection (HTTPS) and server-level safeguards.
10 Changes to this policy
I reserve the right to change this policy. I will announce any changes by updating the “Last updated” date at the top of the page.
11 Contact
For questions about the processing of your personal data or this policy, contact me through the contact form on the home page.
$ cd ~ && contact --me