Privacy

What this site stores on your device

Nothing. No cookies, at any point. No tracking pixels, no fingerprinting, no local storage, no session storage. Not one key, not one value.

Until recently there was exactly one exception: a light/dark switch in the header saved your choice under the key theme. The switch is gone and so is the key. If you visited before and still have it, clearing your browser data removes it; nothing on this site reads it any more.

The card about the outside read, which appears on some pages after a while, remembers that you closed it only while that page is open. It is held in the page's memory and nothing is written to your device, which is also why it can appear again on the next page you open.

There is no cookie banner here: a banner collects consent for cookies, and there are none. If that ever changes, a banner appears and this paragraph goes away.

What happens automatically

Loading any web page tells the server that served it your IP address, the page you asked for, your browser's user agent string, and the time. That is how HTTP works, and it happens before any code on this site runs.

This site is hosted by Cloudflare, Inc. (United States), which processes that request data in order to deliver the page and to protect the service from abuse. Cloudflare acts as a processor on my behalf.

Cloudflare is based in the United States, so serving this page involves a transfer outside the EEA. That transfer runs on the safeguards Cloudflare publishes for its EU customers. The same applies to the copy of my mail that reaches Google, described below.

Legal basis: legitimate interest (Article 6(1)(f) GDPR) in operating and securing the site. Retention: as set by the host's own log retention. I do not download, store or analyse those logs.

Email

If you email me, I receive your address, your message, and anything you choose to include.

That mail takes two hops, and both of them hold a copy. It is delivered to my mailbox at Migadu, a Swiss email host, which stores it. Migadu then forwards a copy to my Google mailbox, which is where I read and answer it. So two processors see your message, not one, and Google's copy is the transfer outside the EEA described above.

Until 2026-08-29 there was only Google, and the address on this site was a Gmail one. If the forwarding is ever switched off — the mailbox works over IMAP without it — Google leaves this page along with it.

I use it to answer you and, if we work together, to run the engagement. I do not add you to a mailing list — there is no mailing list. I do not sell it or share it.

I keep enquiry email for as long as the conversation is live, and for the duration of any engagement that follows plus the retention period required for invoicing records. Ask me to delete anything outside that and I will.

A request for an outside read

The two-question form under "A free outside read" builds an email the same way the seven questions do, in your own mail client, and nothing leaves until you press send there. The email carries what you typed into it: a link to the product and, if you answered it, the one thing that must not silently break. Your address and name arrive with it as your mail client sets them.

I use it to reply, to make the page you asked for, and to count how many of this month's places are taken; the count is a number in this site's source, not a list of names. The page itself is made from what your product publishes, through an account of my own.

Legal basis: steps taken at your request before any contract (Article 6(1)(b) GDPR). If you write on behalf of a company, my legitimate interest in answering an enquiry sent to me (Article 6(1)(f)). Retention: the rule for enquiry email above; the page I send back is kept with the request it answers. Giving these details is voluntary, and without a link to the product there is nothing to read.

Nothing follows the page unless you write again: no mailing list, no newsletter, no sequence of reminders.

If I wrote to you first

If you received a LinkedIn note, a LinkedIn message or an email from me that you did not ask for, this section is about you.

What I keep: your name, job title, company and country; your work email address, only where it is published, or where your company publishes other addresses in the same format; the address of your public professional profile; public statements you made in your professional role, each with its link and date; and whether you replied.

Where it comes from: public professional sources only. Your company's website, press releases, talks, public posts and search results.

Why: to send you one letter or note about the work I offer, and one reminder. Legal basis: legitimate interest (Article 6(1)(f) GDPR) in offering my services to businesses.

Recipients: LinkedIn, if I wrote to you there, and the two mail processors named under Email above, if I wrote by email. Retention: until you ask me to delete it, and no longer than twelve months after my last message.

Objecting: reply "no" to my message, or email me at the address on the main page. I delete the record and do not write to you again. This is your right to object under Article 21 GDPR.

Third parties in full

For a visit, exactly one, and you cannot avoid it without avoiding the site. For mail, two more.

There used to be one more for a visit: a scheduling calendar, loaded only if you clicked for it. The booking route is gone — you write, and you get options back in a working day — so the calendar went with it, along with the only exception in this site's content security policy. Nothing is embedded from anywhere now.

There is nothing else. No fonts from a CDN, no analytics, no social widgets, no tag manager. You can confirm this in your browser's network tab, and I would rather you did.

The home page has a short video behind its headline, and it is worth being exact about it, because video is normally where a third party gets in. It is not embedded from a video service: it is two files on this server, /assets/bg.webm and /assets/bg.mp4, fetched the same way as the stylesheet and by the same origin. Nobody is told that you watched it, because there is nobody else to tell. If your browser has asked for reduced motion, or your window is narrow, the files are never requested at all.

The enquiry forms are worth being exact about, because a form is normally where a third party gets in. There is no form service behind them and no endpoint: the fields are read by a script on this page, which assembles a mailto: link. Your browser then hands that text to whatever mail client you use. Nothing reaches this server, and no request leaves your machine until you press send in your own client. You can confirm this in the network tab, and I would rather you did.

Your rights

Under the GDPR you can request access to your personal data, correction, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest. You can also complain to a supervisory authority — in Slovakia that is the Úrad na ochranu osobných údajov Slovenskej republiky.

To exercise any of these, email me. In practice, for most visitors there is nothing to exercise them against, because I hold nothing about you unless you wrote to me or I wrote to you first.

Who is responsible

The controller for any personal data described on this page is:

Taras Mylyi
Karpatské námestie 7770/10A, 831 06 Bratislava-Rača, Slovakia
IČO: 56993510
Živnostenský register Okresného úradu Bratislava, č. 110-358539

Contact for anything on this page: the address is at the foot of the main page, and the telephone number is +421 952 027 671.

Supervision of the trade itself — separate from the data protection authority named above, which handles the subject of this page — sits with the Inšpektorát SOI pre Bratislavský kraj, Bajkalská 21/A, P.O. BOX 5, 820 07 Bratislava.