Privacy

Who I am

This website is operated by Vlad Sterngold, based in Amsterdam, Netherlands. You can reach me at [email protected].

What I collect

This site collects different types of data depending on how you interact with it. Here is exactly what is collected and why.

Site analytics (all pages)

Umami Cloud provides privacy-friendly analytics. It works without cookies, stores no IP addresses, uses no fingerprinting, and does not track you across sites. I see aggregate numbers (page views, countries, referrers) but cannot identify individual visitors. No personal data is collected or stored.

AI Agreement consent form (/ai-agreement)

If you submit the AI Agreement form, the following personal data is stored in a Cloudflare D1 database: your name (as entered), your choice (radio selection), and an optional note (free text). This data is collected only when you actively submit the form.

Page tracker (shared pages at /p/*)

Shared partner pages include a lightweight JavaScript tracker that sends usage events to Supabase. It collects: page slug, referrer tag (from the URL), a random session ID (generated per visit, not persisted), user agent, screen width, and scroll depth. No cookies are set. This data is used to understand how shared pages are used in aggregate.

Cookies

This site does not set any cookies. No cookie consent banner is needed because there are no cookies to consent to.

Legal basis

• AI Agreement form — Consent (Article 6(1)(a) GDPR). You actively choose to submit your data.
• Umami analytics — Legitimate interest (Article 6(1)(f) GDPR). Cookieless, no personal data, used for aggregate site improvement.
• Page tracker — Legitimate interest (Article 6(1)(f) GDPR). Aggregate usage data for shared pages, no direct identifiers.

Data retention

• AI Agreement submissions — retained until manually deleted. You can request deletion at any time.
• Umami analytics — no personal data is stored. Aggregate statistics are retained for up to 6 months by Umami Cloud.
• Page tracker events — retained in Supabase for analytics purposes. No automatic deletion policy is currently in place.

Third-party services

• Cloudflare Pages — hosts this website. Cloudflare may process minimal connection data. Cloudflare Privacy Policy.
• Cloudflare D1 — stores AI Agreement consent form submissions and anonymous shared-page tracker events. Data resides on Cloudflare infrastructure. Cloudflare Privacy Policy.
• Google Fonts — loads typefaces (Inter, Space Grotesk, Libre Baskerville). Google may log font requests. Google Privacy Policy.
• Umami Cloud — cookieless, GDPR-compliant analytics. No personal data collected. Umami Privacy Policy.

International transfers

Some data is processed by services based in the United States: Cloudflare (hosting, D1 database), Google Fonts (font delivery), and Umami Cloud (analytics). These transfers are covered by Standard Contractual Clauses or equivalent safeguards under the EU-US Data Privacy Framework.

Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the personal data I hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your personal data.
• Restriction — request that I limit how your data is processed.
• Objection — object to processing based on legitimate interest.
• Portability — request your data in a structured, machine-readable format.

To exercise any of these rights, email [email protected] and I'll respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Last updated: April 2026