Privacy Policy

The data controller for this website is TMI Iurii Rogulia (VAT ID FI29845875, DUNS 368664211), a sole trader (toiminimi) registered in Finland.

Lappeenranta, Finland
Email: [email protected]

For any privacy question – access, correction, deletion, or anything else below – email the address above. There is no separate data protection officer; requests go directly to the controller.

Contact form. When you send a message through the contact or service forms, the site processes the name, email address, and message you provide so that the request can be answered. Messages are delivered by email through Resend.

Analytics (always on). The site uses Umami, analytics that I host myself on a separate server in the EU. It is cookieless: it sets no cookies and stores nothing on your device. Your browser sends it the page address (campaign UTM parameters kept, other parameters and identifiers removed), the referring site, your browser, device type, screen size and language, page-load speed, and a few actions such as opening or sending the contact form – so I can see which pages and campaigns bring enquiries. From your IP address and browser details Umami derives your country and a visit code that is reset periodically; the IP address itself is not stored. No third party receives this data. Umami runs without asking for consent; you can turn it off for your browser in the Cookie Policy.

Analytics & advertising (with your consent). Only after you agree on the cookie banner does the site load Google Analytics 4 and Microsoft Clarity (traffic and usage measurement) and Google Ads (conversion tracking). These set cookies; if you decline, they are never loaded. The full per-cookie list and controls are in the Cookie Policy.

Project badges. The footer of every page shows a badge for polytypo, my typography engine, loaded from polytypo.dev; the contact page and this page show a badge that links to the VAT-number check on vatnode.dev, my VAT validation service. Loading a badge sends your browser’s standard request – IP address, browser details and this site’s address – to the server that hosts it. polytypo.dev is hosted on GitHub Pages, and GitHub logs visitors’ IP addresses for security purposes under its own privacy statement; vatnode.dev runs on my own server behind Cloudflare. The badges set no cookies, store nothing on your device and send nothing further.

Error monitoring. Sentry captures technical error reports if something breaks, so the site can be fixed. This may include limited technical context (browser, page, error details).

On your first visit a banner asks whether you accept analytics and marketing cookies, split into three categories (necessary, analytics, marketing). Nothing optional loads until you accept. Your choice is stored in a first-party cookie and remembered on future visits; change it any time on the Cookie Policy page.

The Cookie Policy lists every cookie by category, with provider, purpose, retention, and legal basis, plus a live view of your current consent.

• Consent – Google Analytics, Google Ads, and Microsoft Clarity cookies (Art. 6(1)(a)).
• Legitimate interest — answering your enquiry, cookieless analytics (Umami), showing the project badges, and error monitoring to keep the site secure and working (Art. 6(1)(f)).

• Contact messages – kept for as long as needed to handle your request, and up to 12 months afterwards, then deleted.
• Analytics – aggregated data retained up to 14 months.
• Error reports – retained up to 90 days.

The site relies on a small set of service providers:

• Google Ireland – Google Analytics and Google Ads.
• Microsoft – Clarity analytics.
• Cloudflare – network proxy in front of this site, its analytics server and vatnode.dev; it handles every request, including your IP address.
• GitHub – hosts the polytypo.dev badge and logs visitors’ IP addresses under its own privacy statement.
• Resend – delivery of contact-form emails.
• Sentry – error monitoring (EU region).
• Hosting – a self-managed server located in the EU.

Where a provider transfers data outside the EU/EEA (for example, Google or Microsoft), that transfer relies on the European Commission’s Standard Contractual Clauses. Cloudflare and GitHub are certified under the EU–U.S. Data Privacy Framework.

Under the GDPR you have the right to:

• access the personal data held about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting prior processing.

To exercise any of these, email [email protected]. You also have the right to lodge a complaint with the Finnish supervisory authority, the Office of the Data Protection Ombudsman.

This policy may be updated as the site changes. The date at the top reflects the latest revision.