Privacy Policy
Last Updated: 28 August 2026
This Privacy Policy describes how personal data is processed when you visit this website (kamilbuksakowski.dev).
1. Data Controller
The data controller for this website is:
Kamil Buksakowski
Contact: kamil@kamilbuksakowski.dev
2. What Data We Collect
This website collects minimal data necessary for performance monitoring and content delivery:
Vercel Analytics
- Web Vitals metrics (LCP, INP, CLS, FCP, TTFB) - performance data
- Page views (URL paths visited)
- Approximate location (country only), device type, and browser type
- Anonymous tracking identifiers (cookies/localStorage)
Cloudflare CDN
Temporary server logs including IP addresses for security and content delivery (automatically deleted after 24-48 hours).
Embedded YouTube video
The project details window contains a YouTube video embedded in youtube-nocookie mode. The player does NOT load automatically — until you press play, no data (including your IP address) is sent to Google. Once you press play, YouTube receives your IP address and device information in line with Google's privacy policy.
No Contact Forms
This website does not use contact forms. Contact is via email links (mailto:) which open your default email client. No form data is collected or stored.
3. Purpose of Data Processing
Data is processed for the following purposes:
- Website performance monitoring and optimization (Vercel Analytics)
- Content delivery, security, and DDoS protection (Cloudflare CDN)
4. Legal Basis for Processing
Data processing is based on legitimate interest (Art. 6(1)(f) GDPR). The legitimate interest is monitoring website performance to ensure good user experience and security.
6. Data Transfers Outside the EU
Some data is transferred to the United States:
- Vercel Inc. (San Francisco, USA) - website hosting and analytics
- Cloudflare Inc. (San Francisco, USA) - CDN and DNS services
- Google Ireland Limited / Google LLC (USA) - embedded YouTube video, only after you press play
These transfers are protected by Standard Contractual Clauses (SCC) or EU-U.S. Data Privacy Framework certification.
7. Data Retention Period
- Vercel Analytics: 90 days (then automatically deleted)
- Cloudflare logs: 24-48 hours (then automatically deleted)
8. Your Rights (GDPR)
Under GDPR, you have the following rights:
- Right of access (Art. 15) - request a copy of your data
- Right to rectification (Art. 16) - correct inaccurate data
- Right to erasure (Art. 17) - request deletion of your data ('right to be forgotten')
- Right to restriction of processing (Art. 18)
- Right to object to processing (Art. 21)
- Right to data portability (Art. 20)
- Right to lodge a complaint with a supervisory authority (UODO in Poland)
To exercise your rights, contact: kamil@kamilbuksakowski.dev
9. Contact
For privacy-related questions or GDPR requests, please contact: