Privacy Policy & Cookies

Version 1.0 · Last updated: August 5, 2026

This policy explains what data is collected when you visit maciejbentkowski.pl, on what legal basis, who it is shared with, and how you can withdraw a consent you have already given.

1. Data controller

Maciej Bentkowski
Warsaw, Poland
Email: bentkowskimaciej@gmail.com

This site is run by a private individual, not a company, and no Data Protection Officer has been appointed. For any matter concerning your personal data - including the rights listed in section 9 - write to bentkowskimaciej@gmail.com.

2. What data is collected

This site is informational. There is no contact form, no registration and no ordering system, so no data is collected because you typed it in. Only data generated automatically while you browse is processed:

  • IP address of your device (full or truncated, depending on the tool).
  • Browser and operating system type and version (User-Agent), screen size, device type.
  • Pages viewed, time of the visit and the referring source.
  • Approximate location at city or region level, derived from the IP address.
  • Identifiers stored in cookies and in your browser's Local Storage.

4. Cookies and Local Storage

Cookies are small text files saved on your device. This site also uses Local Storage, which works similarly but is not sent to the server with every request. Access to information on your device follows art. 398 of the Polish Electronic Communications Law: storage necessary to deliver the service you asked for requires no consent, everything else is installed only after you agree.

Before you make a decision, only the essential entry below is stored on your device. No analytics cookie is written, and an advertising cookie is never written at all. The Google Tag Manager container itself is loaded, but Consent Mode keeps it from storing anything until you agree - see section 6.

4.1. Essential - always active

Name Provider / type Duration Purpose
cookie_consent_v1 First party / Local Storage 12 months Stores which categories you consented to, the date of the decision, the schema version and the policy version.

4.2. Analytics - only after consent

Name Provider / type Duration Purpose
_ga Google / first-party cookie 2 years Distinguishes unique visitors.
_ga_<container-id> Google / first-party cookie 2 years Keeps Google Analytics 4 session state.
_gid Google / first-party cookie 24 hours Distinguishes visitors.
_gat, _gat_gtag_<id> Google / first-party cookie 1 minute Throttles the request rate.

4.3. Advertising - none

This site carries no advertising and no advertising tag, so there is no marketing category to consent to. The Google advertising signals (ad_storage, ad_user_data, ad_personalization) are held at denied permanently, whatever you choose in the settings panel, and no _gcl_* cookie can be written.

Exact names and lifetimes of Google cookies can change independently of this site. The current list is published at business.safety.google/adscookies.

5. Recipients and processors

  • Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA - hosting and, through Vercel Speed Insights, page performance measurement. Processes IP addresses and technical request data in server logs and in load measurements. Speed Insights sets no cookies and stores nothing on your device. Basis: art. 6(1)(f) GDPR.
  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland - Google Tag Manager and Google Analytics 4. Basis: your consent for anything stored on or read from your device; art. 6(1)(f) GDPR for the cookieless signal described in section 6.

Web fonts and icon fonts are served from this site's own domain, so loading a page does not disclose your IP address to a font CDN. Your data is never sold, and it is not shared with third parties for their own marketing.

7. How long data is kept

  • Cookies and Local Storage - for the periods listed in section 4, or until you withdraw consent or clear your browser data.
  • Your consent record - 12 months, after which you will be asked again.
  • Google Analytics 4 statistics - according to the property's retention setting: 14 months.
  • Server logs - according to the hosting provider's policy.

8. Transfers outside the EEA

Some providers process data on servers outside the European Economic Area, including in the United States. Such transfers rely on the European Commission's adequacy decision of 10 July 2023 for the EU-US Data Privacy Framework where the provider participates in that programme, and otherwise on Standard Contractual Clauses approved by the Commission together with supplementary safeguards. You can ask for details of the safeguards applied to a specific transfer.

9. Your rights

  • Access to your data and a copy of it (art. 15 GDPR).
  • Rectification of inaccurate or incomplete data (art. 16 GDPR).
  • Erasure - the right to be forgotten (art. 17 GDPR).
  • Restriction of processing (art. 18 GDPR).
  • Portability of data processed on the basis of consent (art. 20 GDPR).
  • Objection to processing based on legitimate interest (art. 21 GDPR).
  • Withdrawal of consent at any time, without affecting the lawfulness of processing carried out beforehand (art. 7(3) GDPR).
  • Complaint to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

To exercise these rights, write to bentkowskimaciej@gmail.com. Data collected through analytics cookies normally does not allow you to be identified; in that case, under art. 11 GDPR, exercising the rights under art. 15-20 may require you to supply additional information that makes identification possible. The right to withdraw consent and to lodge a complaint always applies.

10. Automated decision-making

No decisions producing legal effects concerning you are made in a fully automated way, and no profiling takes place. This site runs no advertising, so nothing here builds an interest profile or feeds one to an ad network. Analytics data, if you consent to it, is used only in aggregate to see which content is read.

11. Change or withdraw your consent

You can change your decision at any time using the "Cookie settings" button in the footer of every page, the reset button below, or by clearing site data in your browser. Withdrawing consent is as easy as giving it. When you withdraw it, cookies belonging to the withdrawn category are deleted from your device.

12. Security

The site is served over HTTPS only. It is a static site with no backend and no database, so no personal data is stored on the server beyond the hosting provider's standard request logs.

13. Changes to this policy

This policy is updated whenever the scope of processing or the set of tools changes. When a change concerns a purpose covered by consent, previously stored consents are invalidated and you will be asked again. Current version: 1.0, last updated August 5, 2026.