Privacy & Compliance

Privacy Policy

Last updated: September 25, 2026 · This policy explains what data codexworker.com collects, the rights you have under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), and how to exercise them.

Data Controller

Who Is Responsible for Your Data

The data controller for this website is Codexworker — an independent backend developer operating from the European Union. For any privacy matter, contact info@codexworker.com. There is no separate data protection officer; the controller responds to privacy requests personally.

Data Collection

What Data This Website Collects

Server log data — IP address, user agent, requested URL and timestamp, collected automatically for security and abuse prevention.
Theme preference — stored locally in your browser (localStorage), never transmitted to a server.
Session data — a temporary session cookie used by the site framework to display technical messages; it contains no personal identifiers.
Inbound email — if you contact me by email, I process your address and the content of your message to respond.
No analytics profiles, no advertising cookies, no cross-site tracking and no sale of personal information.
Legal Bases

Why the Data Is Processed (GDPR Article 6)

Server logs are processed on the basis of legitimate interest (Art. 6(1)(f) GDPR) — keeping the website available and secure. Email correspondence is processed on the basis of contract or pre-contractual steps (Art. 6(1)(b) GDPR) when it leads to a service engagement, or legitimate interest when answering general questions. Theme and session preferences rely on strictly necessary technical storage; no consent banner is required because no optional tracking or marketing cookies are used.

GDPR

Your Rights Under the EU General Data Protection Regulation

If you are in the EU or EEA, you have the following rights regarding your personal data (GDPR Articles 12–23). Requests are answered free of charge, normally within 30 days.

Access (Art. 15) — confirmation whether your data is processed and a copy of it.
Rectification (Art. 16) — correction of inaccurate personal data.
Erasure (Art. 17) — deletion of your data when there is no overriding reason to keep it.
Restriction (Art. 18) — processing paused while a dispute is resolved.
Data portability (Art. 20) — your data in a structured, machine-readable format.
Objection (Art. 21) — objection to processing based on legitimate interest.
Complaint (Art. 77) — lodge a complaint with your national supervisory authority; in Slovakia that is the Úrad na ochranu osobných údajov (dataprotection.gov.sk).
CCPA

Your Rights Under the California Consumer Privacy Act

If you are a California resident, the CCPA grants you the following rights. This website does not sell or share personal information as defined by the CCPA, and it does not discriminate against you for exercising these rights.

Right to know — what personal information is collected, used and disclosed.
Right to delete — request deletion of your personal information.
Right to correct — fix inaccurate personal information (as amended by the CPRA).
Right to opt out of sale or sharing — not applicable here, because no personal information is sold or shared for advertising.
Right to non-discrimination — equal service and pricing regardless of exercising your rights.
Exercising Rights

How to Make a Request

Send an email to info@codexworker.com with the subject line “Privacy Request”. Describe what you want (access, deletion, correction, etc.) and include enough detail to identify you. Identity is verified only by matching the details in the correspondence — no ID documents are required. You receive a substantive response within 30 days (GDPR) or 45 days (CCPA). No account is needed, and an authorized agent may submit on your behalf with written permission.

Retention

How Long Data Is Kept

Server logs are kept for a maximum of 90 days and then automatically removed. Email correspondence is kept while the matter is active and for 3 years afterwards for record-keeping, unless you request deletion sooner or a contract requires longer retention. Nothing else is retained.

Sharing & Transfers

Who Sees Your Data

Data is processed only by the controller and by hosting providers acting as data processors under Article 28 GDPR (EU-hosted servers). No data is sold, rented or shared with advertisers. All fonts are served directly from this website's own servers — no font or style requests go to Google or any other third party.

Changes

Updates to This Policy

This policy may be updated to reflect changes in the website or the law. The “Last updated” date at the top always shows the current version; material changes are announced on this page.

Contact

Privacy question or request?

Whether you want a copy of your data, its deletion, or just clarification — send a short email and you get a personal answer.

Contact About Privacy