Privacy Policy

Privacy Policy

Privacy-first by design  ·  No tracking cookies


Version 2.0  ·  Last reviewed: May 2026

The short version#

This site does not track you. No advertising cookies, no third-party analytics profiles, no data brokers, nothing sold or rented. Analytics are cookieless and aggregate-only. You can read every page without consenting to anything — because there is nothing to consent to.

The longer version below exists because privacy law asks for it, not because the data practices are complicated.

Who is responsible#

This site (heyvaldemar.com) is operated by Vladimir Mikhalev. For any privacy question or to exercise any right described below, email [email protected].

What data is processed#

Hosting & analytics. The site is served through Cloudflare, which processes your IP address and request metadata to deliver pages and to produce Cloudflare Web Analytics — an aggregate, cookieless measurement of page views and referrers. It sets no cookies, does not fingerprint your device, and cannot identify you individually. Legal basis under the GDPR: legitimate interest (Art. 6(1)(f)) in understanding aggregate traffic.

Comments. Comments are powered by Giscus, which stores them as discussions in a public GitHub repository. The comment widget loads only when you scroll to the comment section. To post a comment you sign in with GitHub — at that point GitHub processes your account data under its own privacy policy. If you never comment, no GitHub interaction occurs beyond loading the widget itself.

Fonts. All fonts are self-hosted and served from this domain. No font CDN (such as Google Fonts) ever receives your IP address.

That is the complete list. No contact forms, no newsletter, no e-commerce, no account system, no profiling.

Cookies#

The site sets no tracking or advertising cookies. Cloudflare may set a strictly-necessary security cookie (for example, to mitigate attacks); this is exempt from consent requirements under the ePrivacy Directive because it is essential to delivering the service you requested. Because no non-essential cookies are set, there is no cookie-consent banner — one would be theatre and would incorrectly imply tracking that does not occur.

We do not sell or share personal information#

We do not sell, rent, or otherwise transfer personal information to third parties for monetary or other valuable consideration. We do not participate in cross-context behavioural advertising, and we have no advertising network, affiliate tracking, or data-broker relationship. This applies under every privacy law worldwide, and specifically under the California Consumer Privacy Act (CCPA / CPRA) definitions of “sale” and “sharing.”

Third parties#

ServicePurposeData it seesTheir policy
CloudflareHosting, CDN, cookieless analyticsIP address, request metadatacloudflare.com/privacypolicy
GitHub / GiscusCommentsGitHub account — only if you choose to commentGitHub Privacy Statement

No data is shared with anyone else.

Your rights — by jurisdiction#

We honour the rights granted by every major privacy law for visitors worldwide. Because this site processes minimal data (cookieless analytics, no account system), most requests resolve within a few business days. To exercise any of these rights, email [email protected]. No formal authentication is required because we hold no account-level data — we will verify a request through the email channel itself.

European Union / EEA — GDPR#

Under Articles 15–22 of the General Data Protection Regulation you have the right to request access to your personal data, correction or deletion, restriction of processing, data portability, and to object to processing based on legitimate interest. You may lodge a complaint with your national data protection authority.

United Kingdom — UK GDPR + Data Protection Act 2018#

Same rights as the EU GDPR. UK residents may complain to the Information Commissioner’s Office (ico.org.uk).

California — CCPA / CPRA#

California residents have the right to:

  • Know what categories of personal information are collected and the purposes of processing (this page is the disclosure).
  • Delete personal information held about them, subject to legal exceptions.
  • Correct inaccurate personal information.
  • Opt out of “sale” or “sharing” of personal information. We do not “sell” or “share” personal information as defined under CCPA / CPRA.
  • Limit use of sensitive personal information. We do not collect sensitive personal information.
  • Non-discrimination for exercising any of the above rights.

Complaints to the California Attorney General or the California Privacy Protection Agency.

Other US states — VCDPA, CPA, CTDPA, UCPA, TDPSA, …#

Residents of Virginia, Colorado, Connecticut, Utah, Texas, and other US states with comprehensive privacy laws have substantively the same rights as California residents above — right to know, delete, correct, and opt out of any “sale” or targeted advertising. Email to request; we hold no account-level data so verification happens through the email itself.

Canada — PIPEDA#

Canadian visitors may request access to their personal information, request correction, and withdraw consent at any time. Complaints to the Office of the Privacy Commissioner of Canada.

Brazil — LGPD#

Brazilian residents have the rights set out in LGPD Art. 18: confirmation of processing, access, correction, anonymisation / blocking / deletion, portability, deletion of consented data, information about sharing, information about the consequences of refusing consent, and revocation of consent. Complaints to the Autoridade Nacional de Proteção de Dados (ANPD).

Australia — Privacy Act 1988#

Rights under the Australian Privacy Principles (APPs), including access and correction. Complaints to the Office of the Australian Information Commissioner.

Anywhere else#

The same rights apply on a best-effort basis. Email and we will work out the correct path under your local law.

Data retention#

Aggregate analytics are retained by Cloudflare under its own schedule and contain no personal identifiers. Comments persist in the public GitHub discussion until you delete them through your GitHub account. No personal data is otherwise stored on this site’s infrastructure.

Changes#

If these practices change, this page is updated and the version + last reviewed date above change with it. Any material change — especially introducing any form of tracking — would be announced on the site, this policy would be substantially revised, and a proper opt-in consent mechanism would be added for any non-essential cookies. There are no current plans to introduce tracking.