Privacy policy
This notice explains which personal data this website processes, why, for how long and what your rights are. The site is designed to collect as little data as possible.
Who is responsible
The controller is Ștefan-Emanuel Ciupitu, reachable at ciupitustefan12@gmail.com.
Contact form
When you send a message, I process your name, email address, the optional subject and the message itself, solely to read and answer it.
Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the box, and steps taken at your request before a possible contract (Art. 6(1)(b) GDPR). You can withdraw consent at any time by emailing me.
Messages are stored in a database and automatically deleted after 180 days, or earlier on request.
Security and abuse prevention
To protect the contact form and the administration area against spam and brute-force attacks, your IP address is converted on the server into a non-reversible keyed hash (HMAC-SHA-256). Only that hash is stored, for at most 24 hours, in a rate-limiting counter. The raw IP address is not stored by this application.
Legal basis: legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).
The hosting provider may keep technical access logs (for example IP address and requested URL) for a short period, under its own policy.
Cookies and local storage
No analytics, advertising or tracking cookies are used, and no third-party tracking scripts are loaded.
The site stores only what it strictly needs: a NEXT_LOCALE cookie with your language choice (1 year), your light/dark theme preference in your browser's local storage, and — for the site administrator only — authentication cookies for the dashboard. These are exempt from consent because they are strictly necessary.
Service providers (processors)
Vercel Inc. (website hosting), Supabase Inc. (database and file storage) and, if email notifications are enabled, Resend (sending notification emails). These providers act on my behalf under data processing agreements. Some of them are based in the United States; transfers rely on the safeguards they offer, such as the EU Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. To exercise them, email me; I will reply within one month.
You also have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro), or with the authority in your country of residence.
Changes
If the way this site processes data changes, this page will be updated and the date below will change.
Last updated: