← Back to Portfolio

Privacy Policy

Effective Date: August 4, 2026

This Privacy Policy describes how Mateusz Kaczmarczyk ("I", "me", or "my") collects, uses, and protects your personal information when you visit my portfolio website and use the contact form.

1. Information I Collect

When you use the contact form on this website, I collect:

• Name: The name you provide in the contact form
• Message: The content of your message or inquiry
• Technical Information: IP address, browser information, and timestamp (for security and spam prevention)

I do not collect email addresses, phone numbers, or any other personal information beyond what you voluntarily provide in the contact form.

Separately, when you browse this website I collect anonymous usage statistics — pages viewed, scroll depth, and which projects or links you interacted with. This is done without cookies and without storing anything on your device. See Section 9 for how this works and what is deliberately not collected.

2. How I Use Your Information

I use the collected information solely to:

• Respond to your inquiry or message
• Communicate with you about your request
• Prevent spam and ensure form security

I do not:

• Use your information for marketing or promotional purposes
• Sell, rent, or share your personal information with third parties
• Use your information for any purpose other than responding to your inquiry

3. Legal Basis for Processing (GDPR)

If you are in the European Union, my legal basis for processing your personal data is:

• Legitimate Interest: Processing is necessary for my legitimate interest in responding to your inquiry and providing support
• Legitimate Interest: Processing is necessary for my legitimate interest in understanding how my portfolio is used so I can improve it. This is limited to anonymous, cookieless measurement (see Section 9), which is why it does not rely on your consent

4. Data Storage and Security

Your data is:

• Transmitted securely: All form submissions are encrypted via HTTPS
• Processed via serverless functions: Using Cloudflare Pages Functions for enhanced security
• Sent via email: Form submissions are sent to my secure email address using MailChannels
• Not stored permanently: Form data is only temporarily processed to send the email notification

5. Data Retention

I retain your contact form submissions for:

• Email records: Up to 6 months in my email system for communication history
• Server logs: Up to 30 days for security and technical purposes
• Analytics events: Retained by PostHog in the EU. These records are anonymous by design — they contain no identifier that could be linked back to you, so they cannot be traced to an individual visitor after collection

After these periods, your data is automatically deleted or anonymized.

6. Your Rights

Under GDPR and CCPA, you have the right to:

• Access: Request a copy of the personal data I hold about you
• Rectification: Request correction of inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal data
• Restriction: Request restriction of processing

7. California Consumer Privacy Act (CCPA) Rights

If you are a California resident, you have additional rights:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (Note: I do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

8. Third-Party Services

This website uses:

• Cloudflare: For hosting and serverless functions, and for carrying analytics traffic to PostHog (Privacy Policy: cloudflare.com/privacy)
• MailChannels: For sending email notifications (Privacy Policy: mailchannels.com/privacy)
• Google Fonts: For typography (Privacy Policy: Google Privacy Policy)
• PostHog (EU): For cookieless website analytics, stored on servers in Frankfurt, Germany. Analytics requests are routed via a subdomain of this website (e.youex.design) before reaching PostHog (Privacy Policy: posthog.com/privacy)

9. Cookies and Tracking

This website does not use cookies. Nothing is stored on your device — no cookies, no local storage, no session storage. There is no cookie banner because there is nothing to consent to.

I do measure how the site is used, via PostHog running in cookieless mode. Because no identifier is stored in your browser, visitors are counted using an irreversible hash generated on PostHog's servers from your IP address, browser user agent, and a random value that changes every day and is deleted once that day's data has been processed. The hash cannot be reversed to recover your IP address or identify you, and it cannot be used to recognise you across different websites or on a later day.

What is recorded: pages viewed, how far down a page you scrolled, which sections of a long page you reached, which projects, case studies and stories you opened, and clicks on links such as my email address. What is not recorded: your name, your email address, your precise location, session recordings or screen replays of your visit, indiscriminate capture of every click you make, and any tracking of you across other websites.

How to object: this website honours the Do Not Track and Global Privacy Control signals. If either is enabled in your browser or via an extension, no analytics data is collected from your visit at all. Because nothing is stored on your device, this is respected automatically on every visit — there is no setting to remember and no opt-out cookie to keep.

10. International Data Transfers

Your data may be processed in countries outside your jurisdiction through Cloudflare's global network. All transfers are protected by appropriate safeguards and comply with applicable data protection laws.

11. Changes to This Privacy Policy

I may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Continued use of the website after changes constitutes acceptance of the revised policy.

12. Contact Information

13. Data Controller Information

Data Controller: Mateusz Kaczmarczyk
Website: youex.design
Contact: hello@youex.design

This Privacy Policy is designed to comply with GDPR, CCPA, and other applicable privacy laws. If you have specific concerns about privacy compliance, please consult with a legal professional.