This policy explains what data is collected when you visit
maciejbentkowski.pl, on what legal basis, who it is shared with,
and how you can withdraw a consent you have already given.
This site is run by a private individual, not a company, and no Data Protection Officer
has been appointed. For any matter concerning your personal data - including the rights
listed in section 9 - write to
bentkowskimaciej@gmail.com.
2. What data is collected
This site is informational. There is no contact form, no registration and no ordering
system, so no data is collected because you typed it in. Only data generated
automatically while you browse is processed:
•IP address of your device (full or truncated, depending on the tool).
•Browser and operating system type and version (User-Agent), screen size, device type.
•Pages viewed, time of the visit and the referring source.
•Approximate location at city or region level, derived from the IP address.
•Identifiers stored in cookies and in your browser's Local Storage.
3. Purposes and legal bases
Purpose
Legal basis
Category
Serving the page, keeping it secure and stable
Art. 6(1)(f) GDPR - legitimate interest
Essential
Remembering your privacy decision and being able to prove it
Art. 6(1)(c) and (f) GDPR
Essential
Measuring traffic and how the site is used
Art. 6(1)(a) GDPR - your consent
Analytics
Estimating aggregate traffic while consent is missing, via the cookieless Consent Mode signal (section 6)
Providing data is voluntary. Refusing analytics storage does not restrict access to any
content on this site.
4. Cookies and Local Storage
Cookies are small text files saved on your device. This site also uses Local Storage,
which works similarly but is not sent to the server with every request. Access to
information on your device follows art. 398 of the Polish Electronic Communications Law:
storage necessary to deliver the service you asked for requires no consent, everything
else is installed only after you agree.
Before you make a decision, only the essential entry
below is stored on your device. No analytics cookie is written, and an advertising
cookie is never written at all.
The Google Tag Manager container itself is loaded, but Consent Mode keeps it from
storing anything until you agree - see section 6.
4.1. Essential - always active
Name
Provider / type
Duration
Purpose
cookie_consent_v1
First party / Local Storage
12 months
Stores which categories you consented to, the date of the decision, the schema version and the policy version.
4.2. Analytics - only after consent
Name
Provider / type
Duration
Purpose
_ga
Google / first-party cookie
2 years
Distinguishes unique visitors.
_ga_<container-id>
Google / first-party cookie
2 years
Keeps Google Analytics 4 session state.
_gid
Google / first-party cookie
24 hours
Distinguishes visitors.
_gat, _gat_gtag_<id>
Google / first-party cookie
1 minute
Throttles the request rate.
4.3. Advertising - none
This site carries no advertising and no advertising tag, so there is no marketing
category to consent to. The Google advertising signals
(ad_storage,
ad_user_data,
ad_personalization) are held at
denied permanently, whatever you choose in
the settings panel, and no _gcl_* cookie can
be written.
Exact names and lifetimes of Google cookies can change independently of this site. The
current list is published at
business.safety.google/adscookies.
5. Recipients and processors
•Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA - hosting and, through Vercel Speed Insights, page performance measurement. Processes IP addresses and technical request data in server logs and in load measurements. Speed Insights sets no cookies and stores nothing on your device. Basis: art. 6(1)(f) GDPR.
•Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland - Google Tag Manager and Google Analytics 4. Basis: your consent for anything stored on or read from your device; art. 6(1)(f) GDPR for the cookieless signal described in section 6.
Web fonts and icon fonts are served from this site's own domain, so loading a page does
not disclose your IP address to a font CDN. Your data is never sold, and it is not shared
with third parties for their own marketing.
6. Google Consent Mode v2
Google's tools are loaded in a restricted mode in which they
cannot write any cookie or identifier to your device
until you agree. In practice:
•Before consent: every optional signal is set to denied. Nothing is stored on or read from your device, and no identifier that could recognise you is created.
•Cookieless pings: while consent is missing, Google may still receive a basic technical signal that a page was viewed - timestamp, user agent, referrer and a coarse, country-level location derived from the IP address. It contains no cookie, no advertising identifier and nothing that links one visit to another; it is used only to estimate aggregate statistics.
•After consent: the state is passed to Google immediately, replayed on every later visit, and only the categories you enabled become active.
•Ad data redaction (ads_data_redaction) is enabled and URL identifier passthrough (url_passthrough) is disabled, so no click or advertising identifier is forwarded while consent is missing.
The legal basis for the cookieless signal is art. 6(1)(f) GDPR - the legitimate interest
in knowing roughly how the site is used. It does not involve storing or reading
information on your device, so it falls outside art. 398 of the Electronic
Communications Law and does not require consent. You can object to it at any time under
art. 21 GDPR, and blocking
googletagmanager.com in your browser
prevents it entirely.
7. How long data is kept
•Cookies and Local Storage - for the periods listed in section 4, or until you withdraw consent or clear your browser data.
•Your consent record - 12 months, after which you will be asked again.
•Google Analytics 4 statistics - according to the property's retention setting: 14 months.
•Server logs - according to the hosting provider's policy.
8. Transfers outside the EEA
Some providers process data on servers outside the European Economic Area, including in
the United States. Such transfers rely on the European Commission's adequacy decision of
10 July 2023 for the EU-US Data Privacy Framework
where the provider participates in that programme, and otherwise on
Standard Contractual Clauses approved by the
Commission together with supplementary safeguards. You can ask for details of the
safeguards applied to a specific transfer.
9. Your rights
•Access to your data and a copy of it (art. 15 GDPR).
•Rectification of inaccurate or incomplete data (art. 16 GDPR).
•Erasure - the right to be forgotten (art. 17 GDPR).
•Restriction of processing (art. 18 GDPR).
•Portability of data processed on the basis of consent (art. 20 GDPR).
•Objection to processing based on legitimate interest (art. 21 GDPR).
•Withdrawal of consent at any time, without affecting the lawfulness of processing carried out beforehand (art. 7(3) GDPR).
•Complaint to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.
To exercise these rights, write to bentkowskimaciej@gmail.com.
Data collected through analytics cookies normally does not allow you to be identified; in
that case, under art. 11 GDPR, exercising the rights under art. 15-20 may require you to
supply additional information that makes identification possible. The right to withdraw
consent and to lodge a complaint always applies.
10. Automated decision-making
No decisions producing legal effects concerning you are made in a fully automated way,
and no profiling takes place. This site runs no advertising, so nothing here builds an
interest profile or feeds one to an ad network. Analytics data, if you consent to it, is
used only in aggregate to see which content is read.
11. Change or withdraw your consent
You can change your decision at any time using the
"Cookie settings" button in the footer of every
page, the reset button below, or by clearing site data in your browser. Withdrawing
consent is as easy as giving it. When you withdraw it, cookies belonging to the
withdrawn category are deleted from your device.
12. Security
The site is served over HTTPS only. It is a static site with no backend and no database,
so no personal data is stored on the server beyond the hosting provider's standard
request logs.
13. Changes to this policy
This policy is updated whenever the scope of processing or the set of tools changes.
When a change concerns a purpose covered by consent, previously stored consents are
invalidated and you will be asked again. Current version:
1.0, last updated August 5, 2026.
Maciej Bentkowski, the controller of this site, uses Local Storage and - with your consent - Google Analytics. Nothing optional is stored until you decide. There is no advertising here and never will be, and refusing costs you access to nothing. Privacy Policy
Privacy settings
The controller is Maciej Bentkowski. Optional categories are off by default, advertising signals stay denied permanently, and closing this window without choosing does not grant any consent. privacy policy
Always on
Required for the site to work and to remember your privacy decision. They cannot be disabled.
Storage duration: 12 months (consent record in Local Storage)
Google Analytics 4, loaded through Google Tag Manager. Helps me understand which content visitors find useful.