Privacy Policy

Last updated: August 2026

1. Data Controller

Henrijs Kons
Email: henrijskons@gmail.com

2. General Information

I take the protection of your personal data seriously. Personal data is only collected and used to the extent necessary to provide a functional website and the offered content and services. This website does not use tracking or analytics tools (e.g. Google Analytics). No marketing cookies are set.

3. Server Log Files

Each time the website is accessed, the hosting provider automatically records information transmitted by your browser to the server. This includes: IP address, date and time of access, URL accessed, browser and operating system used. This data is used exclusively for the technical security of the website and deleted after 7 days at the latest.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and error-free provision of the website).

4. Contact Form

When you use the contact form on this website, the data you enter (name, email address, subject, and message) is transmitted to me by email. This data is used exclusively to process your inquiry and is not permanently stored in a database or on the server.

Transmission takes place via the Gmail email service (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google's privacy policy applies:policies.google.com/privacy.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries) or Art. 6(1)(b) GDPR (pre-contractual measures) if your inquiry is directed at entering into a contract.

5. User Accounts and Authentication

This website offers optional user accounts. If you choose to sign in via Google orMicrosoft (OAuth), we receive from the respective provider: your email address, display name, and profile picture URL. This data is stored in a database on our server solely to maintain your account and provide authentication functionality.

If you register with an email address and password, we store your email address and a bcrypt hash of your password. Your plaintext password is never stored.

Account data is retained as long as the account exists. You may request deletion at any time by emailinghenrijskons@gmail.com.

Legal basis: Art. 6(1)(b) GDPR (provision of the requested service).

Third-party providers involved in OAuth sign-in:

  • Google: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy policy: policies.google.com/privacy.
  • Microsoft: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Privacy statement: privacy.microsoft.com.

6. Session Cookie

When you sign in to your account, a strictly necessary session cookie named sessionis placed in your browser. It contains only a random identifier — no personal data. It is used exclusively to keep you authenticated between page loads.

The cookie is set with HttpOnly andSameSite=Lax attributes for security. It expires after 30 days or when you log out, whichever comes first.

This cookie is strictly necessary (EU ePrivacy Directive Art. 5(3); German TTDSG §25(2) no. 2) and requires no consent. Visitors who do not sign in receive no cookies from this website.

7. Local Storage

This website saves your color scheme preference (light/dark mode) in your browser'slocalStorage. This is a technically necessary function with no personal reference. The data does not leave your device and is not transmitted to any server.

8. External Links

This website contains links to external websites (e.g. GitHub, LinkedIn). The operators of those sites are solely responsible for their privacy practices. I have no influence over the content or privacy practices of those sites.

9. Your Rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

To exercise your rights, please contact:henrijskons@gmail.com

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent authority depends on your place of residence or the location of the alleged infringement. A list of EU supervisory authorities is available at:edpb.europa.eu.