Privacy Policy
This is my personal portfolio site. It has no ads, no analytics and no tracking. The only personal data it collects is what you choose to send me through the contact form.
Last updated: 11 October 2026
Who is responsible
This site belongs to Alexandru-Dan Ciucă (Alex), a student from Moinești, Romania. I am responsible for the personal data described on this page (the “controller”, in GDPR terms).
To contact me about your data, use the contact form.
What I collect
- Contact form: your name, your email address and your message, plus which language version of the site you used.
- Spam protection: for 10 minutes, the form keeps a scrambled (hashed) version of your IP address to limit how many messages can be sent. Your real IP address is not saved.
- Server logs: like any website, the server that hosts this site may keep standard access logs (IP address, browser, pages visited, time) for security and troubleshooting.
- Language cookie: only if you accept it in the cookie banner.
The site has no comments, no user accounts, no newsletter, no analytics and no ads. Fonts, images and videos come from this site itself, so visiting it doesn’t send your data to Google or any other third party.
Why I use it
I use your name, email address and message only to read your message and reply to you. The legal basis is my legitimate interest in answering the messages people send me (Article 6(1)(f) GDPR). If you write to me about a commission, it’s also the steps you asked for before a possible agreement (Article 6(1)(b) GDPR).
Spam protection and server logs rely on my legitimate interest in keeping the site safe. The language cookie relies on your consent, and you can withdraw it at any time.
I never sell your data, use it for advertising or add you to a mailing list.
Who can see it
Messages are saved in this site’s database and a copy is emailed to my inbox. Only I read them. The company that hosts the site and my email provider store this data for me, only so their services work. I don’t share it with anyone else unless the law requires it.
How long I keep it
I keep messages only as long as I need them to reply and follow up. Then I delete them, from the site and from my inbox, and I clear out old messages regularly. The spam-protection data expires after 10 minutes and WordPress then deletes it.
Your rights
Under the GDPR, you can ask me to:
- show you the personal data I have about you;
- correct it;
- delete it;
- limit how I use it, or object to it;
- give you a copy in a common format.
Send your request through the contact form and I’ll answer within one month.
You can also complain to the Romanian data protection authority, ANSPDCP, at dataprotection.ro.
Links to other sites
This site links to Exly.dev and GitHub. They have their own privacy policies. This page only covers this site.
Changes
If the way this site handles data changes, for example when it moves to its own domain, I’ll update this page and the date at the top.