Privacy Policy
This is a personal portfolio site. There are no accounts, no forms, no newsletter and no advertising. The only visitor data collected beyond standard server logs is anonymous traffic analytics — and that runs only if you agree.
1. Who is responsible
The controller of personal data collected through lzych.pl is Łukasz Zych, Warsaw, Poland. For any privacy matter, write to the address shown on the contact section (or use the contact details on the home page).
2. Server logs
The site is hosted by Zenbox sp. z o.o., which keeps standard web server logs. These may include your IP address, the date and time of the request, the address requested, the HTTP status, and your browser's user-agent string.
- Purpose: keeping the site running, diagnosing faults, and protecting it from abuse.
- Legal basis: legitimate interest, Art. 6(1)(f) GDPR.
- Retention: as applied by the hosting provider, typically a few weeks.
Logs are not used to build a profile of you and are not combined with the analytics below.
3. Analytics (Matomo) — consent only
Traffic statistics are collected with Matomo, a self-hosted analytics
tool running on the hosting provider's infrastructure at
statystyki12.zenbox.pl. The data stays there. It is not sent to any
advertising network, not sold, and not used to track you across other websites.
Matomo is blocked until you press “Accept” in the cookie banner. If you choose “Essential only”, or ignore the banner, no analytics cookie is set and no page view is recorded.
If you do consent, Matomo records:
- pages viewed and the order you viewed them in;
- the referring page or search engine that brought you here;
- approximate location, derived from a shortened IP address;
- device type, screen size, browser and operating system;
- outbound links and file downloads you click.
- Legal basis: your consent, Art. 6(1)(a) GDPR.
- Retention: aggregated reports are kept indefinitely; raw visit-level data is deleted after 6 months.
You can change your mind at any time: . Withdrawing consent does not affect the lawfulness of what was collected beforehand.
4. Cookies and local storage
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
lz_cookie_consent |
This site (local storage) |
Remembers whether you accepted or declined analytics, so the banner does not reappear. | Until you clear your browser storage |
_pk_id.* |
Matomo | Distinguishes returning visits. Only after consent. | 13 months |
_pk_ses.* |
Matomo | Groups requests into a single visit. Only after consent. | 30 minutes |
No cookie is set before you make a choice. The consent record itself is stored in your browser's local storage, never sent to a server.
5. Web fonts
The typefaces used here (Orbitron and Rajdhani) are loaded from
Google Fonts. Your browser therefore contacts Google's servers
(fonts.googleapis.com, fonts.gstatic.com), which means your IP
address and browser details are visible to Google, including transfer outside the
European Economic Area under the EU–US Data Privacy Framework. This happens on
page load and is necessary to display the site as designed
(legitimate interest, Art. 6(1)(f) GDPR).
6. Contacting me
If you email or call using the details on the home page, I process what you send — your address, your name if you give it, and the content of your message — in order to reply and, where relevant, to discuss possible work (Art. 6(1)(b) and 6(1)(f) GDPR). Correspondence is kept only as long as it is useful for that purpose.
The email address and phone number are revealed by JavaScript rather than written into the page, purely to reduce spam harvesting. That mechanism collects nothing.
7. Who else sees the data
- Zenbox sp. z o.o. — hosting provider, acting as a processor for the site and the Matomo installation.
- Google Ireland Ltd. / Google LLC — only through the font requests described in section 5.
- LinkedIn and GitHub — only if you click through to those profiles, at which point their own policies apply.
No data is sold, rented, or shared with advertisers. There is no automated decision-making or profiling.
8. Your rights
Under the GDPR you may ask me to:
- tell you what data about you I hold, and give you a copy (Art. 15);
- correct anything inaccurate (Art. 16);
- erase your data (Art. 17);
- restrict how it is used (Art. 18);
- transfer it to you or another controller (Art. 20);
- stop processing based on legitimate interest (Art. 21);
- withdraw consent for analytics at any time (Art. 7(3)) — the button in section 3 does exactly that.
Requests go to the contact address above. If you think your data is being handled improperly, you may complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
9. Changes
If this policy changes, the revised version is published on this page with a new date at the top. Material changes affecting analytics will also reset the consent banner.