Last updated: 13 September 2026
The short version
- This site does not track you. There is no analytics, no advertising and no third-party scripts, fonts or embeds — everything loads from this server.
- The only personal data it receives is what you type into the contact form. That goes to my inbox so I can reply to you and nowhere else.
- No cookies are set while you browse. Two small functional cookies can appear in specific situations, described below.
- No profiling and no automated decisions are made about you.
Who is responsible
The controller of your personal data is Pavlo Zhdanov. For anything related to your data, write to paul (dot) zhdanov (at) gmail (dot) com.
This policy covers the website only. When we work together on a project, the processing of your company's data is governed by a separate data processing agreement.
What is collected and why
The contact form
When you send a request, the form collects your name, company, work email, preferred language and your message. It is used for one purpose: to reply to you and discuss your request.
Legal basis: the consent you give with the checkbox in the form and steps taken at your request before a possible contract (Art. 6(1)(a) and (b) GDPR).
The website does not keep your request in a database. It is delivered as an email and stored in my mailbox. If the conversation does not lead to cooperation, it is deleted no later than 12 months after our last exchange.
Protection against spam
To stop automated abuse, the form accepts at most two requests per hour from one connection. For that it keeps a one-way hash of your IP address — never the address itself — together with the time of the request. The entries are deleted automatically after one hour.
Legal basis: legitimate interest in keeping the website secure (Art. 6(1)(f) GDPR).
Server logs
Like any web server, the hosting server records technical data for each request: IP address, date and time, the page requested, the browser's user agent and the response code. These logs are used only for security and troubleshooting and are kept for a short period.
Legal basis: legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
Cookies and local storage
No cookies are set while you browse this site and nothing is used for analytics or advertising. What follows is strictly necessary and does not require consent:
zd_sent— set for 5 minutes after you send the contact form, so the page can show the confirmation.language— set only if you open a link that explicitly selects a language; kept until you close the browser.zd-cookie-notice(local storage) — remembers that you have closed the note about cookies.
Separate cookies are used when the site administrator signs in to the content management system. They are never set for visitors.
Who receives your data
Your data is not sold or shared for marketing. It is processed only by the service providers needed to run the site and to answer you: the hosting provider and the email service. Where a provider processes data outside the European Economic Area, the transfer relies on an adequacy decision or the European Commission's standard contractual clauses.
Your rights
Under the GDPR you can ask for access to your data, its correction or deletion, restriction of processing and a copy in a portable format. You can object to processing based on legitimate interest and withdraw your consent at any time — this does not affect processing that took place before.
To use any of these rights, write to paul (dot) zhdanov (at) gmail (dot) com. I reply within one month. You also have the right to lodge a complaint with a data protection authority, in particular in the country where you live or work.
Security
The site is served only over HTTPS. Data files are not reachable from the web and every page carries a strict Content Security Policy that blocks code from other websites. Only the administrator has access to the content management system.
Changes to this policy
If the way the site handles data changes, this page will be updated and the date at the top will change with it.