Privacy
policy
This site is a portfolio - there are no accounts, no cart and no forms. The only data that can be collected is anonymous visit statistics, and only if you agree to it.
1. Who is responsible
The data controller is Marcin Stawarz, who runs mstawarz.com. Contact for anything related to data: marcinstawarz777@gmail.com.
2. What is collected
The site asks for nothing. There is no sign-up, no login, no contact form and no payments. Data appears in two situations only:
- Visit statistics - if you accept cookies, Google Analytics 4 stores a random browser identifier, approximate location (country or city, never a precise address), device and browser type, referral source and which pages you visit. Your IP address is truncated before it is stored.
- Correspondence - if you write to the e-mail address shown on the site, I receive your address and your message. By ordinary mail, outside this website.
3. Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Visit statistics, checking what works on the site | Your consent - Art. 6(1)(a) GDPR. You can withdraw it at any time. |
| Replying to your message and any work that follows | Steps taken at your request and my legitimate interest in correspondence - Art. 6(1)(b) and (f) GDPR. |
4. Cookies and browser storage
Until you click "Accept", the site stores no cookies and loads no Google scripts. The banner is not decoration - Google Analytics does not load at all until you consent.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
_ga, _ga_<ID> | Telling visitors apart in the statistics | up to 2 years | |
ms-consent | This site | Remembering your choice so the banner does not return on every visit | until you clear your browser data |
ms-consent is a local storage entry, not a cookie - it is never sent to any
server and stays on your device.
You can change your decision at any time: the Cookie settings button at the bottom of the home page reopens the banner. You can also delete cookies yourself in your browser settings.
5. Who the data goes to
Statistics go to Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as the provider of Google Analytics. Google may also process data outside the European Economic Area, based on the European Commission's adequacy decision for the EU-US Data Privacy Framework and on standard contractual clauses.
The site is hosted on GitHub Pages (GitHub, Inc.) which, like any server, records technical access logs. I have no access to them and no control over their scope.
Nobody else. Data is never sold or exchanged, and is not used for profiling or automated decision-making.
6. How long
- Google Analytics statistics - as configured in the panel, 14 months by default.
- E-mail correspondence - as long as the matter requires, then for the period arising from any potential claims.
7. Your rights
You have the right to access your data, correct it, delete it, restrict its processing, port it, and to object to processing based on legitimate interest. You can withdraw your consent to statistics at any time - this does not affect the lawfulness of what happened before.
To exercise any of these rights, a message to marcinstawarz777@gmail.com is enough.
If you believe your data is being processed unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, or with the supervisory authority in your own EU country.
8. External links
The site links to Instagram, TikTok and the bakuplug.com shop. Once you click through, their own privacy rules apply - I have no influence over what they do with data. None of them embeds scripts or tracking pixels on this site.
9. Changes
If the site ever starts collecting more, this document will be updated and the date below will change.