Privacy Policy

ovchyn.me is Peter Ovchyn's personal site and blog. It has no visitor accounts, no comments, no newsletter and no forms, and it shows no ads.

It counts visits with Vercel Web Analytics, which sets no cookies. Google Analytics runs only if you choose Accept in the cookie banner, and you can change your mind at any time under "Cookie settings" at the bottom of every page.

The data controller is Peter Ovchyn, who runs this site himself. To reach him about privacy, send him a message on LinkedIn.

The site runs on Vercel (Vercel Inc.). Its server code runs in Vercel's Frankfurt region (fra1), and Vercel's network delivers pages from a location near you. To deliver a page, Vercel processes your IP address, your browser's user agent, the address you asked for and the page that linked to it, and keeps them in its request logs for a short time to run and protect the service.

The site's content (its pages, posts and images, and the editor's account) is stored in a Neon Postgres database in the EU (AWS eu-central-1, Frankfurt) and in Vercel Blob, and images are served through the site's own address. Neither holds anything about visitors.

The legal basis is legitimate interest (GDPR Article 6(1)(f)): without this processing the site cannot be shown at all.

Every page counts the visit with Vercel Web Analytics. Its script is served from this site's own address, and it sets no cookies and stores nothing in your browser.

For each page view it records the page, the site that linked to it, your browser, operating system and device type, and your approximate location (country, region and city, worked out from your request). Visits are told apart by a hash of the request that is discarded after 24 hours, so it cannot follow you from one day to the next or across other sites. Peter sees only totals.

The legal basis is legitimate interest in knowing which pages are read (GDPR Article 6(1)(f)). Because nothing is stored on your device, it does not need your consent.

Google Analytics 4 runs only after you choose Accept in the cookie banner. Until then nothing from Google is loaded and nothing is sent to Google. If you choose Decline, or never choose, it never runs.

After Accept, your browser loads Google's gtag.js script, which sets the cookies _ga and _ga_<ID> on this site and sends Google the pages you view, how you arrived, your browser and device, and your approximate location. It runs in Google's Consent Mode with only analytics allowed: advertising storage, ad personalisation and ad user data stay off, and the site shows no ads.

Google (Google Ireland Limited, with Google LLC in the US) processes this data for Peter and keeps it for the period set in the site's Google Analytics property, at most 14 months. Google Analytics 4 does not log or store IP addresses.

The legal basis is your consent (GDPR Article 6(1)(a)).

• cookie-consent: remembers whether you chose Accept or Decline, for about six months (182 days); after that the banner asks again. It belongs to this site, goes to no one else, and is needed to respect your choice.
• _ga and _ga_<ID>: Google Analytics, only after Accept.
• payload-token: set only for the site's editor when he signs in to manage the content. Visitors never get it.

To withdraw your consent, choose "Cookie settings" at the bottom of any page and then Decline. The site stops Google Analytics on that page and deletes its cookies. You can also delete this site's cookies in your browser at any time.

• There are no forms. If a contact form is added later, what you send through it will be stored in the site's database and read only by Peter, and this page will say so first.
• There are no visitor accounts and no comments.
• There are no ads, social-media widgets or tracking pixels. Links to LinkedIn, GitHub and other sites are plain links; their own privacy policies apply once you follow them.
• Fonts are served from this site's own address, so loading a page asks no font service about you.
• The search box finds posts on the site's server, and the site does not store what you search for.

Every page and post is also published as plain markdown (add .md to its address, or /index.md for the home page), and /llms.txt and /llms-full.txt list the site's content for AI tools. They hold the same public text as the pages, nothing about visitors, and run no analytics script.

Vercel and Google are US companies and may process data in the United States. They do so under the safeguards EU law requires, such as the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

Under the GDPR you can ask what personal data about you is held, have it corrected or deleted, restrict or object to its processing, get a copy of it, and withdraw your consent to Google Analytics at any time (this does not affect what was processed before). To do any of this, message Peter on LinkedIn. The site does not know who you are, so he may need your help to find data about you, such as when you visited.

You can also complain to the data protection authority where you live or work.

If what the site collects changes, this page changes first, with a new date. This version is in effect from 9 October 2026.