Privacy

What this site stores on your device

Nothing. No cookies, at any point. No tracking pixels, no fingerprinting, no local storage, no session storage. Not one key, not one value.

Until recently there was exactly one exception: a light/dark switch in the header saved your choice under the key theme. The switch is gone and so is the key. If you visited before and still have it, clearing your browser data removes it; nothing on this site reads it any more.

There is no cookie banner here: a banner collects consent for cookies, and there are none. If that ever changes, a banner appears and this paragraph goes away.

What happens automatically

Loading any web page tells the server that served it your IP address, the page you asked for, your browser's user agent string, and the time. That is how HTTP works, and it happens before any code on this site runs.

This site is hosted by Cloudflare, Inc. (United States), which processes that request data in order to deliver the page and to protect the service from abuse. Cloudflare acts as a processor on my behalf.

Cloudflare is based in the United States, so serving this page involves a transfer outside the EEA. That transfer runs on the safeguards Cloudflare publishes for its EU customers. The same applies to the copy of my mail that reaches Google, described below.

Legal basis: legitimate interest (Article 6(1)(f) GDPR) in operating and securing the site. Retention: as set by the host's own log retention. I do not download, store or analyse those logs.

Email

If you email me, I receive your address, your message, and anything you choose to include.

That mail takes two hops, and both of them hold a copy. It is delivered to my mailbox at Migadu, a Swiss email host, which stores it. Migadu then forwards a copy to my Google mailbox, which is where I read and answer it. So two processors see your message, not one, and Google's copy is the transfer outside the EEA described above.

Until 2026-08-29 there was only Google, and the address on this site was a Gmail one. If the forwarding is ever switched off — the mailbox works over IMAP without it — Google leaves this page along with it.

I use it to answer you and, if we work together, to run the engagement. I do not add you to a mailing list — there is no mailing list. I do not sell it or share it.

I keep enquiry email for as long as the conversation is live, and for the duration of any engagement that follows plus the retention period required for invoicing records. Ask me to delete anything outside that and I will.

Third parties in full

There is exactly one, and you cannot avoid it without avoiding the site.

There used to be a second: a scheduling calendar, loaded only if you clicked for it. The booking route is gone — you write, and you get options back in a working day — so the calendar went with it, along with the only exception in this site's content security policy. Nothing is embedded from anywhere now.

There is nothing else. No fonts from a CDN, no analytics, no social widgets, no tag manager. You can confirm this in your browser's network tab, and I would rather you did.

The home page has a short video behind its headline, and it is worth being exact about it, because video is normally where a third party gets in. It is not embedded from a video service: it is two files on this server, /assets/bg.webm and /assets/bg.mp4, fetched the same way as the stylesheet and by the same origin. Nobody is told that you watched it, because there is nobody else to tell. If your browser has asked for reduced motion, or your window is narrow, the files are never requested at all.

The enquiry form is worth being exact about, because a form is normally where a third party gets in. There is no form service behind it and no endpoint: the seven fields are read by a script on this page, which assembles a mailto: link. Your browser then hands that text to whatever mail client you use. Nothing reaches this server, and no request leaves your machine until you press send in your own client. You can confirm this in the network tab, and I would rather you did.

Your rights

Under the GDPR you can request access to your personal data, correction, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest. You can also complain to a supervisory authority — in Slovakia that is the Úrad na ochranu osobných údajov Slovenskej republiky.

To exercise any of these, email me. In practice, for most visitors there is nothing to exercise them against, because I hold nothing about you unless you wrote to me.

Who is responsible

The controller for any personal data described on this page is:

Taras Mylyi
Karpatské námestie 7770/10A, 831 06 Bratislava-Rača, Slovakia
IČO: 56993510
Živnostenský register Okresného úradu Bratislava, č. 110-358539

Contact for anything on this page: the address is at the foot of the main page, and the telephone number is +421 952 027 671.

Supervision of the trade itself — separate from the data protection authority named above, which handles the subject of this page — sits with the Inšpektorát SOI pre Bratislavský kraj, Bajkalská 21/A, P.O. BOX 5, 820 07 Bratislava.