This personal site describes my work and offers ways to get in touch. Here is how it handles your data.
Last updated: 14 September 2026.
Who is responsible
Karol Galanciak is the data controller for this site. For anything in this policy - including a request to see, correct or delete your data - drop me a message on LinkedIn. I answer these myself.
What happens when you just read a page
The site is hosted on GitHub Pages. GitHub receives your IP address and user agent in its server logs, because it cannot serve you a page otherwise. I have no access to those logs and cannot switch them off.
The three typefaces are hosted on this site alongside its pages. Loading them makes no request to Google Fonts or another font provider.
Analytics and comments stay blocked until you accept the banner. You can also load comments separately without enabling analytics. Reading a page does not require either service.
Cookies, and the choice you are offered
On your first visit a banner asks whether to load analytics and comments. Reject is exactly
as easy as Accept. Your answer is kept in your browser's local storage under
kg-consent. It never leaves your device and I never see it.
You can change your mind at any time using Cookie settings, which is also in the footer of every page. Rejecting after accepting stops analytics, removes the Google Analytics cookies accessible to this site, and reloads the page to stop any loaded analytics or comments. Cookies belonging to another provider’s domain cannot be removed by this site; you can clear those through your browser settings.
| What | Purpose | Loads |
|---|---|---|
Local storage kg-consent |
Remembers your cookie choice | Always - it is the mechanism that honours your refusal |
| Google Analytics 4 | Counts visits and which pages get read | Only if you accept |
| Disqus | Comment threads under articles | Only if you accept, or if you press Load comments |
Google Analytics 4
If you accept analytics, Google Analytics 4 measures page views and interactions so I can understand how the site is used. It can collect page addresses, referring sites, visit times, browser and device information, approximate location and cookie identifiers. Google receives your IP address when your browser connects; GA4 does not log or store individual IP addresses.
The _ga and _ga_* cookies distinguish browsers and sessions. This site
sets their lifetime to two years, renewed with activity; your browser may shorten that period.
They are not created by this site before consent. Refusing consent blocks the Google tag itself.
Google signals and advertising personalisation signals are disabled in the site's tag configuration.
Cookie expiry is separate from retention of data already sent to Google. Analytics event data is retained for 2 months and user data for 14 months. The 14-month retention period for your user identifier restarts with each new activity. These limits do not apply to standard aggregated reports. Rejecting stops future collection but does not delete previously collected data. Contact me about deletion requests. See Google’s privacy policy and Google Analytics data safeguards.
If you get in touch
You can contact me by email or through LinkedIn. I receive the information you choose to send and use it to respond to your enquiry. I keep the message for as long as the conversation is needed to handle your enquiry or an agreed engagement, and for any applicable legal obligations. You can ask for deletion; I will explain if a legal obligation requires retention.
Email and LinkedIn messages are handled by the respective providers under their own privacy policies. This site does not submit your message through a contact form or load reCAPTCHA.
If you book a call
Booking buttons take you to Cal.com. It receives the details you enter, including your name, email address and any answer to the booking question. I use these to arrange and prepare for our conversation. Meeting details are also handled by Google Calendar and Google Meet. This site does not embed Cal.com or load its scripts. See Cal.com’s privacy policy.
If you leave a comment
Comments are hosted by Disqus and are governed by their account, not mine. Disqus receives your IP address, the article address, browser information and whatever you put in your profile or comment. Its scripts can use cookies and other storage under Disqus’s privacy policy. Choosing Load comments enables Disqus for that page without enabling GA4. You can edit or delete your own comments there, or ask me to delete them.
Legal basis, in plain terms
- Consent - analytics and comments. This is why the banner exists, and why refusing it costs you nothing on the page.
- Contract, at your request - handling enquiries and arranging calls about a possible engagement.
- Legitimate interest - server logs, which help keep the site available.
Where your data goes
The providers used for hosting, analytics, comments, messages and scheduling may process data outside the European Economic Area. Their policies describe the relevant locations and transfer safeguards, including Standard Contractual Clauses or the EU - US Data Privacy Framework where applicable. See the policies for GitHub, Google, LinkedIn, Cal.com and Disqus.
I do not sell your enquiry details or use them for advertising. Disqus may use data for personalised advertising and share it with advertising partners under its own policy. You can refuse to load comments here and manage Disqus preferences through its data sharing settings.
Your rights
Under the GDPR you can ask for a copy of your data, ask me to correct it, ask me to delete it, object to processing, or withdraw consent at any time. Drop me a message on LinkedIn.
You also have the right to lodge a complaint with a data protection supervisory authority, particularly in the country where you live or work, or where you believe an infringement occurred.