1. Who is responsible

The controller of your personal data is:

CraftWeb Sp. z o.o.
Osiedle Pod Wiatrakami 9, 62-261 Lednogóra, Poland
KRS 0001039024 · NIP 7842535739 · REGON 525423100

This is a personal portfolio, so the rest of this page is written in the first person. "I" means Dawid Kawalec, who runs the company and is the person who actually reads your message.

The fastest way to reach me about anything on this page, including deleting your data, is hello@kawalec.pl.

2. What this site does not do

• No analytics. No Google Analytics, no Matomo, no Plausible, nothing counting your visit.
• No advertising or social media pixels, no remarketing, no profiling.
• No cookies. The site sets none, so there is no cookie banner to click away.

If you only read the pages and never write to me, I do not learn who you are.

3. The contact form

When you send the form in the Contact section, these fields are submitted: name, email address, subject and message.

They are delivered to me as an email at hello@kawalec.pl and stay in that mailbox. They are not written to any database and they are not used for a newsletter or shared with anyone.

The notification email also contains your IP address and browser user agent. That is there so I can recognise abuse if the form gets flooded, and for nothing else. The form is additionally rate limited to a few submissions per address per ten minutes.

Legal basis: your consent, which you give with the checkbox under the form (Art. 6(1)(a) GDPR), and my legitimate interest in protecting the form against spam and abuse (Art. 6(1)(f) GDPR).

4. The AI chat assistant

The chat bubble in the corner is an AI assistant that answers questions about my work. Using it is entirely optional.

• What you type is sent to my own server and forwarded to the Google Gemini API, which generates the reply. Google processes the content of the message to do that.
• The conversation is stored in a database on my own server so I can see what people ask about.
• Your IP address is stored only as a salted one way hash, never in readable form. It is used for rate limiting.
• If you leave your name and contact details in the chat, they are emailed to me as an enquiry. If you gave an email address, a copy of the conversation is also emailed to you.
• Your browser keeps the current chat in sessionStorage so it survives a page reload. It is gone when you close the tab.

Please do not paste sensitive information into the chat - no passwords, no health or financial details, no confidential documents. It is a website chat, not a secure channel.

Legal basis: your consent, given by choosing to write in the chat (Art. 6(1)(a) GDPR).

5. Browser storage

Two things are stored locally in your browser. Neither is a cookie and neither is used to track you:

• light-mode in localStorage - remembers whether you switched the site to light theme.
• The chat state in sessionStorage - described above, cleared when you close the tab.

You can clear both at any time in your browser settings without breaking anything.

6. Who else sees anything

I keep this stack deliberately small. These are the only third parties involved:

• Hetzner Online GmbH - the virtual server that runs this site and the chat backend, located in Helsinki, Finland (EU). I rent and administer it myself.
• Google - the Gemini API generates the chat replies. Google Fonts also serves the two typefaces used here, which means your IP address reaches Google when a page loads.
• cyber-folks - the provider of the kawalec.pl mailbox that receives form submissions and enquiries.

Nothing is sold, rented or handed to advertisers or data brokers.

7. How long it is kept

Straight answer: there is no automated purge running. Emails stay in my mailbox and chat records stay on my server for as long as they are useful for handling your enquiry and understanding what visitors ask about.

Write to hello@kawalec.pl and I will delete your data. You do not need to justify the request.

8. Your rights

Under GDPR you can ask me to:

• tell you what data about you I hold, and give you a copy,
• correct it if it is wrong,
• delete it,
• restrict how it is used, or object to that use,
• withdraw a consent you gave earlier, which does not undo processing that already happened.

One email to hello@kawalec.pl is enough for any of these. No form to fill in, no ticket system.

If you think I am handling your data badly, you can complain to the Polish supervisory authority: Prezes Urzedu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa.

9. Changes

If the way this site handles data changes, this page changes with it and the date at the top is updated. There is no version history to dig through: what you read here is what currently happens.