Privacy policy

1Who is responsible for your data

The controller of your personal data is Maxim Markarov, a sole trader registered in Poland (entry in CEIDG):

For anything about your data, write to support@markarov.dev. It is our only mailbox, and we answer in English, Polish or Russian.

2What this policy covers

This policy covers the pages of markarov.dev: the studio home page, the app catalogue under /mobile/, the security page, web tools such as the natal chart calculator, and the audit request form.

It does not cover our mobile apps or the web demos under /demo/. Those are separate services with their own policies; the app policies are listed at markarov.dev/docs/. The rules for using the site are in the terms of service.

3What we process, why and for how long

We collect only what the site needs to work and what you choose to send us.

3.1Visiting the site: server logs

Every request passes through Cloudflare to our web server (Caddy), which writes one line to its log.

Data

IP address, browser user agent, the address (URL) requested, the time and the response status.

Purpose

Delivering the pages, finding faults and protecting the site. Each IP address has a request limit, and an address that probes for vulnerabilities is blocked automatically for up to 6 hours.

Legal basis

Our legitimate interest in running a working and secure website (Art. 6(1)(f) GDPR).

Kept for

30 days, then deleted.

3.2The audit request form

The form on the security page is how you ask us for a security audit.

Data

Your name and email address. If you fill them in: your company, the system to check, your message and your self-check answers. The scope, timeline and reason you chose, and the language of the page. We do not store your IP address with the request; it appears only in the server log, as for any visit (see above).

Purpose

Answering your request and preparing an offer.

Legal basis

Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Stored

On our server; a copy reaches our mailbox by email through Resend.

Kept for

12 months after the last message about the request. If a contract follows, we keep what accounting and tax law requires, for as long as it requires (Art. 6(1)(c) GDPR).

Name and email are required: without them we cannot answer. Everything else is optional.

3.3Email to support@markarov.dev

Data

Your email address, your name if you give it, and what you write.

Purpose

Answering you.

Legal basis

Our legitimate interest in answering messages (Art. 6(1)(f) GDPR); if you write about a contract, steps before entering into it (Art. 6(1)(b) GDPR).

Kept for

12 months after the last message, unless accounting or tax law requires longer.

3.4What stays in your browser

The site's pages set no cookies, run no analytics and show no advertising. A few of your choices are saved in your browser's local storage so that the site remembers them. Nothing from there is sent to us:

mm-theme

light or dark theme

mm-lang

the language you chose

mm-cookie-consent

your answer to the cookie notice

arkanoid404_hi

your best score in the mini game on the 404 page

These entries serve only what you chose. You can delete them at any time in your browser settings (site data).

One exception we do not control in advance: when Cloudflare checks a suspicious request for bots, it may set its own security cookie (__cf_bm or cf_clearance). It is strictly necessary for protecting the site, holds no profile of you and expires within hours.

3.5Tools that run in your browser

Some tools on the site compute everything on your device. The natal chart calculator, for example, uses the date, time and place of birth you type only in your browser and sends nothing to our server.

4Who else handles the data

We do not sell personal data and do not share it for advertising. These providers process data on our behalf:

• OVHcloud — hosting: our server is a virtual machine in Warsaw, Poland (EU).
• Cloudflare, Inc. (USA) — the network in front of the server (CDN, proxy, DNS), forwarding of email sent to support@markarov.dev, and storage of our backups (Cloudflare R2).
• Resend, Inc. (USA) — delivers each audit request to our mailbox by email.
• Google LLC (USA) — Gmail, the mailbox where email to support@markarov.dev arrives.

Cloudflare, Resend and Google may process data in the United States. These transfers rely on the EU–US Data Privacy Framework, where the provider is certified under it, and/or on the standard contractual clauses adopted by the European Commission.

We disclose data to public authorities only when the law requires it.

5Security and backups

Pages are served over HTTPS only. Each IP address has a request limit, and addresses that probe for vulnerabilities are blocked automatically (see above).

We back up the server's data every day to Cloudflare R2. Daily copies are overwritten within 7 days; monthly copies are deleted after 12 months. Data deleted from the server therefore leaves the backups within 12 months at the latest.

6Your rights

You have the right to:

• access your data and get a copy of it (Art. 15 GDPR);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict processing (Art. 18);
• receive the data you gave us in a machine-readable format (portability, Art. 20);
• object at any time, on grounds relating to your situation, to processing based on our legitimate interest under Art. 6(1)(f) (Art. 21).

Write to support@markarov.dev. We reply within one month and may ask you to confirm that the request comes from you.

Server logs are not linked to a name, so we can find your entries only if you tell us your IP address and the time of your visit.

If you think we process your data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or with the supervisory authority of the EU country where you live or work.

7Other information

• Giving us data is voluntary. Without a name and an email address we cannot answer an audit request.
• We make no decisions based solely on automated processing and do not profile visitors. The self-check on the security page computes its result in your browser; the answers reach us only if you send them with a request.

8Changes to this policy

When the site or the way we handle data changes, we update this page and the date at the top.