Privacy Policy

Who is responsible

This website is operated by Tamas Szabo, Budapest, Hungary. You can reach me at hello@tamasszabo.org for any privacy-related questions.

What data is collected and why

This site uses Google Tag Manager to run Google Analytics (GA4). The Tag Manager script is loaded on every page so that it can respect your cookie choice. Loading it means your browser connects to Google’s servers, which receive your IP address and standard request data. Until you click Accept, analytics storage is denied: no analytics cookies are set and no analytics identifiers are stored. Advertising storage, ad user data, and ad personalization are denied at all times.

If you click Accept, analytics storage is granted and GA4 collects usage data: pages visited, time on site, device type, and approximate location at city level. I do not use this data to identify you.

Purpose: Understanding which content is useful so I can write better posts.
Legal basis: Consent (Art. 6(1)(a) GDPR).
Retention: 14 months (Google’s default for GA4).
Third party: Google LLC, subject to the EU-US Data Privacy Framework.

If you click Decline, analytics stays off. Your choice is stored in your browser’s localStorage and remembered on future visits. You can change your mind at any time using the Cookie settings link in the footer of every page.

Third-party resources loaded on every page

To display the site, your browser loads the following directly from third parties. Each of them receives your IP address and standard request data:

Google Fonts (Google LLC) for the Space Grotesk typeface.
Tailwind CSS CDN (cdn.tailwindcss.com) for page styling.

Legal basis: Legitimate interest in delivering a working, consistently styled website (Art. 6(1)(f) GDPR).

Embedded content

Some pages embed content from other services. These load when the page loads, and the provider may set its own cookies or collect data under its own policy:

YouTube (Google LLC): the ClutchStats video on the home page. YouTube privacy
Tableau Public (Salesforce, Inc.): interactive visualizations in some blog posts. Tableau privacy

The newsletter is run on Substack (Substack Inc.). When you type your email address into a subscribe box on this site and click Subscribe, a new tab opens on substack.com with your address pre-filled, and you complete the signup there. Your email address is sent to Substack at that point, not to me directly. Substack privacy policy

Contact form

If you submit the contact form on the Work With Me page, your name, email address, company name, and message are sent to Formspree (Formspree, Inc.) and forwarded to my email inbox.

Purpose: Responding to inquiries.
Legal basis: Pre-contractual steps and legitimate interest in responding to inquiries (Art. 6(1)(b) and (f) GDPR).
Retention: I delete inquiry emails that do not lead to a project within 12 months.
Third party: Formspree, Inc. — see their privacy policy.

Hosting and infrastructure

This site is hosted on GitHub Pages (GitHub, Inc.) and served through Cloudflare (Cloudflare, Inc.). Both services process your IP address to deliver pages to your browser. Cloudflare may also set strictly necessary security cookies. No additional data is stored by me through these services.

GitHub privacy policy: github.com/site/privacy
Cloudflare privacy policy: cloudflare.com/privacypolicy

Comments (Giscus)

Blog posts include an optional comment section powered by Giscus, which uses GitHub Discussions. Comments are only loaded if you click Load Comments and consent. If you post a comment, it is stored in the GitHub repository’s Discussions and subject to GitHub’s privacy policy.

As a resident of the EU/EEA, you have the right to:

Access the personal data I hold about you
Correct inaccurate data
Delete your data (“right to be forgotten”)
Object to or restrict processing
Withdraw consent at any time (without affecting prior processing)
Lodge a complaint with your local data protection authority

To exercise any of these rights, contact me at hello@tamasszabo.org. I will respond within 30 days.

Cookies and local storage

This site does not set any tracking cookies itself. The only browser storage used by this site is:

Key	Purpose	Expires
`cookie_consent`	Remembers your analytics preference	Until you clear browser data
`giscus_consent`	Remembers whether you loaded comments	Until you clear browser data

If you accept analytics, Google Analytics may set its own cookies in your browser. You can inspect and delete these via your browser’s developer tools. To change your choice, use the Cookie settings link in the footer.

Changes to this policy

If I make material changes, I will update the “Last updated” date at the top of this page. I won’t notify you individually, so check back if you’re curious.