The short version
- No cookies are set for tracking — which is why there is no cookie banner to click away.
- Visit statistics are cookieless and aggregate. No IP address is stored.
- The contact form sends your name, email and message to my inbox. Nothing more.
- Nothing is sold, rented, or handed to advertisers.
- Fonts are hosted on this domain, so no request goes to Google Fonts.
Who is responsible
Tobias Francisty — tobias@francisty.me. I am the data controller for this website under the GDPR (Regulation (EU) 2016/679). Anything on this page, including every request listed under Your rights, goes to that address.
The contact form
If you use the form on the homepage, I receive:
- the name you type in,
- the email address you type in,
- the message you write,
- the time it arrived.
Why: to read your enquiry and reply to it. Legal basis: Art. 6(1)(b) GDPR (steps taken before entering a contract) when you are asking about work, otherwise Art. 6(1)(f) — my legitimate interest in answering messages people send me.
Processor: the form is relayed by Web3Forms, which passes submissions to my mailbox and may process them outside the EEA under its own terms — see web3forms.com/privacy. It does not publish your message anywhere. The form also contains a hidden anti-spam field; if an automated bot fills it in, the submission is discarded.
How long: messages stay in my mailbox as long as the conversation could still matter — typically up to 24 months for enquiries that lead nowhere, and longer for projects I actually deliver, where invoicing and tax records apply.
You can always skip the form and email me directly at tobias@francisty.me — same inbox, one less processor involved.
Visit statistics
This site counts page views with GoatCounter, an open-source, cookieless analytics tool. It records the page address, the page you came from, rough browser and screen-size information, and a country derived from your IP address. It sets no cookies, does not store your IP address, and does not build a profile that follows you around the web. I can see that a page was read — not who read it.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in knowing which pages are actually read. Because nothing is stored on your device, no consent banner is required under the ePrivacy Directive or the Slovak Electronic Communications Act (452/2021 Z. z.). Any content blocker stops the script if you would rather not be counted.
What is stored in your browser
Two things live in your browser's local storage. Neither one is sent to me:
- your language choice (EN or SK), so the site opens in the same language next time;
- on the demo sites — for example the Lunula shop — the contents of the demo cart. Those demos are fictional showcases: no order is ever placed and no payment is ever taken.
Local storage is not a cookie and never leaves your device. Clearing your browser data removes it.
Hosting, fonts, and what is not here
The site is served by GitHub Pages (GitHub, Inc., USA), which processes standard server request data — including your IP address — to deliver pages and defend against abuse. See GitHub's privacy statement.
Typefaces are files hosted on this domain, so opening a page makes no request to Google Fonts or any other font CDN. There are no embedded videos, no social media widgets, no advertising networks, and no third-party trackers.
Your rights
Under the GDPR you can ask me to confirm what data I hold about you and give you a copy (access), correct it (rectification), delete it (erasure), limit what I do with it (restriction), hand it over in a portable format (portability), or stop processing that rests on legitimate interest (objection). Email tobias@francisty.me and I will reply within one month.
If you think I have handled your data badly, you can complain to the Slovak supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava — dataprotection.gov.sk.
Changes
If what this site collects changes, this page changes with it and the date below moves.