Contact me

$ cat ~/privacy.md

Last updated: 20 September 2026

This is a personal portfolio. It has no cookies, no analytics, and no trackers. The only personal data it handles is what you type into the contact form, plus your IP address, which is used to check you are not a bot and to limit how many messages one address can send — and is then discarded rather than stored.

Who is responsible

Igor Wozniak. This site is run by me personally, not by a company. You can reach me at contact@igorwoz.com about anything on this page.

What the site collects

Nothing at all until you submit the contact form. Simply reading the site stores nothing on your device and creates no record tied to you beyond the standard server logs described below.

Name, email address, subject, message
What you type into the contact form. Used only to read your message and reply to it. Nothing is inferred from it, and it is never used for a mailing list.
IP address
Used for two things, both at the moment you submit: sent to Cloudflare Turnstile as part of the bot check, and used as a key to count submissions so one sender cannot flood the form. That counter is stored for one hour and then deleted automatically. Your IP address is deliberately not included in the email I receive.
Country
A two-letter country code, derived by Cloudflare from your connection and included in the notification email. It helps me recognise patterns in spam. It does not identify you.
Server logs
Cloudflare records requests to this site as part of operating it, as any web host does. I do not query, export, or analyse those logs.

Cookies and tracking

There are none. No cookies are set, nothing is written to local storage, and there is no analytics script, advertising pixel, or third-party tracker anywhere on this site. That is why you were not asked to accept anything when you arrived.

The bot check is Cloudflare Turnstile, chosen partly because it works without cookies and does not profile visitors across sites. It does not read what you type into the form.

The form also contains one hidden field that is invisible to people and impossible to fill in by accident. Automated scripts fill it anyway, so if it arrives with anything in it the submission is discarded and never reaches my inbox. If you are reading this, it does not apply to you.

Who else processes it

Two services, both acting on my instructions:

Your message is not shared with anyone else, sold, or used to train anything. Both services may process data outside your country; each publishes its own transfer safeguards in the policies linked above.

How long it is kept

  • Rate-limit counter — one hour, then deleted automatically.
  • Your message — kept in my email while the conversation is useful, and deleted once it is not. If you would rather I delete it sooner, ask and I will.
  • Resend's copy — retained by Resend according to their own policy, linked above.

Your choices

Write to contact@igorwoz.com and I will tell you what I hold, correct it, or delete it. Depending on where you live you may have a formal right to those things; either way I will do them on request, and I do not need you to cite a law to ask.

You can also skip the form entirely and email me directly, which avoids the bot check and the rate-limit counter altogether.

Children

This site is aimed at recruiters, engineers, and prospective clients. It is not directed at children and I do not knowingly collect their data.

Security

The site is served only over HTTPS. Form submissions are validated and the bot check is verified server-side before anything is sent, so a token from your browser is never taken on trust. The credentials used to deliver mail are held as encrypted environment secrets and are never present in anything sent to your browser.

Changes

If I change what the site collects, I will update this page and the date at the top. There is no mailing list to notify, which is rather the point.

~/