Privacy policy

This Privacy Policy explains how personal data is handled when you visit evyaand.com or contact its operator. The website is operated by Evgeny Andreichyk in Tel Aviv, Israel.

1. Controller and contact

Evgeny Andreichyk is the controller, or person responsible, for the personal data described in this policy.

For a privacy question or request, email evyaandj@gmail.com with the subject line “Privacy request”.

2. Scope

This policy applies to this website and messages submitted through its contact form. It does not apply to third-party websites, platforms or services linked from the site. Those services apply their own terms and privacy policies.

3. Personal data collected

Website delivery and security

The site is hosted on GitHub Pages. When the site is visited, GitHub logs the visitor’s IP address for security purposes and may process ordinary technical request data, such as date and time, requested URL, browser or device information, and diagnostic data. I do not receive access to GitHub’s raw IP address logs through this website.

Analytics

The site uses Google Analytics 4 through Google Tag Manager to understand how visitors use it. Depending on your cookie choice and the configuration in effect, analytics may process:

• pages viewed and the approximate time and sequence of a visit;
• interactions with selected links, buttons and page sections;
• referring page, campaign or traffic source;
• browser, device, operating system, language and approximate geographic region;
• random browser or session identifiers stored in analytics cookies if you accept analytics cookies.

Google states that Analytics uses IP addresses during collection but does not log or store them. This site is not intended to send names, email addresses or contact form contents to Google Analytics.

The current Google Consent Mode setup may load the Google tag before a visitor makes a choice. When analytics storage is denied, Google does not read or write analytics cookies, but may receive limited measurements without cookies, such as consent status, timestamp, browser user agent, referrer and a random number generated for the page load.

Contact form and correspondence

If you use the contact form or email the operator, the following data may be collected:

• your name and email address;
• the contents of your message and later correspondence;
• technical data needed to deliver the form and prevent spam or abuse.

Providing this information is voluntary, but the required fields are necessary to submit the form and receive a reply. Do not send passwords, identification documents, financial information, health data or other sensitive information unless it is strictly necessary and you have first agreed on a secure method of transmission.

Formspree processes form submissions and delivers them by email. Cloudflare Turnstile protects the form from automated abuse and may process signals such as IP address, TLS fingerprint, browser user agent, site key and website origin.

Cookie choices

CookieYes manages the cookie banner and records your preferences. A consent record may include a consent identifier, choice date and time, category status, geographic region and a partially masked IP address. A necessary preference cookie is stored in the browser so the site can remember your choice.

4. Purposes and legal bases

Where processing relies on legitimate interests, those interests are balanced against the visitor’s rights and reasonable expectations. Where processing relies on consent, you may withdraw that consent at any time without affecting processing already carried out lawfully.

5. No sale, advertising or significant automated decisions

I do not sell or rent personal data. The current website does not use personal data for targeted advertising or direct marketing, and does not make automated decisions that produce legal or similarly significant effects about visitors.

6. Service providers and disclosures

Personal data may be processed by the following providers only to the extent needed for their function:

• GitHub, Inc., website hosting, delivery and security;
• Google LLC and relevant affiliates, Google Tag Manager and Google Analytics;
• CookieYes Limited, cookie consent management and consent records;
• Formspree, Inc., contact form processing, temporary storage and email delivery;
• Cloudflare, Inc., Turnstile bot detection and form security;
• email and infrastructure providers, for receiving and storing correspondence.

Data may also be disclosed when required by applicable law, court order or a valid request from a competent authority, or when reasonably necessary to investigate abuse, protect safety, enforce legal rights or defend a legal claim. The operator does not authorize these recipients to use personal data for unrelated purposes.

7. International transfers

The site is operated from Israel. The European Commission currently recognises Israel as providing an adequate level of protection for relevant automated transfers of personal data from the European Economic Area.

Some providers may process data in the United States, the United Kingdom, the European Economic Area or other countries. Where required, transfers are made under an adequacy decision, approved contractual safeguards or another lawful transfer mechanism made available by the provider. Details are available in the relevant provider’s privacy documentation.

8. Retention

Personal data is kept only for as long as reasonably necessary for the purpose described, subject to technical limits and legal duties:

• Formspree submission history is intended to be retained for no more than 30 days.
• Email copies and related correspondence are intended to be retained for up to 12 months after the last exchange.
• Google Analytics user-level and event-level data is intended to be retained for no more than 14 months. Aggregated reports may remain available longer because the same retention control may not apply to them.
• Cookie choices and related consent records are intended to be retained for up to 12 months.
• Hosting, security and abuse-prevention logs are retained by the relevant provider for the period it reasonably requires under its policy.

Data may be kept longer when reasonably necessary to comply with law, resolve a dispute, investigate abuse, or establish, exercise or defend a legal claim. It may be deleted or anonymised earlier when no longer needed.

9. Your rights and choices

Depending on where you live and the law that applies, you may have rights to request access to personal data, correction of inaccurate data, deletion, restriction, objection, portability, or withdrawal of consent. You may also have a right to complain to a competent privacy regulator.

To make a request, email evyaandj@gmail.com. Please state the right you want to exercise and provide enough information to identify the relevant record. To protect personal data, reasonable identity verification may be requested. The request may be limited or refused where the law permits or requires it, including when another person’s rights, legal privilege, security or legal record-keeping obligations are involved.

You can change non-essential cookie choices at any time by selecting “Cookie settings” in the footer. You can also delete cookies through your browser.

10. Security

Reasonable technical and organisational safeguards are used or required from providers, including encrypted transport where supported, access controls, minimisation and security monitoring. No internet transmission, browser storage, email system or hosted service can be guaranteed completely secure. You send information at your own risk and should avoid unnecessary sensitive data.

11. Children

This general-audience site is not directed to children and is not intended to knowingly collect personal data from anyone under 16. If you believe a child has provided personal data, email the privacy address so it can be reviewed and, where appropriate, deleted.

12. External links

The site contains links to websites and social platforms operated by third parties. Following a link may allow that third party to collect data under its own policies. The operator does not control and is not responsible for the privacy, security or content of external services.

13. Changes to this policy

This policy may be updated to reflect changes to the site, providers, technology or law. The effective date at the top will be changed when a revision is published. If a change materially affects how previously collected data is used, additional notice or consent will be provided where required by law.