Contact form (name, email, message): sent to my inbox and kept in a protected log as a fallback in case delivery fails. Used only to reply to you. Deleted automatically after 90 days.
Secure message form: your message is encrypted in your browser before it's sent — this server only ever stores the encrypted blob and the time it arrived, and cannot read the contents. The encrypted blob is deleted automatically after 90 days.
A session cookie and a hashed (not raw) IP address are used briefly to stop spam/abuse on the forms. IP hashes are discarded after one hour. No analytics or third-party trackers run on this site.
None loaded by the page itself — no external fonts, scripts, or ad/analytics services. Rackhost (this site's Hungarian host) processes traffic as infrastructure, per their own hosting terms.
Under GDPR, you can ask me to show, correct, or delete any data I hold about you before its automatic 90-day expiry. Reach out via the contact or secure message form, or email me directly.