/ Privacy notice
Privacy.
Plain English. What I collect when you visit this site, why I keep it, and what your rights are. No dark patterns.
/ Notice
Who runs this site
This site is operated by Venelin Videnov, in Plovdiv, Bulgaria. Contact: through the contact page.
What gets collected when you read
Almost nothing. The site is mostly static essays and project notes. There is no login, no profile, no behavioural advertising.
Two things do happen automatically:
- Server access logs. Cloudflare, in front of the site, records standard request metadata (IP address, user agent, timestamp, URL). These are kept short-term for abuse and DDoS protection. Standard infrastructure logging.
- Privacy-friendly analytics. I run a self-hosted instance of Plausible on my own infrastructure. It counts page views and referrers. It does not use cookies. It does not store IP addresses or any personally identifying information. It does not follow you across sites.
What gets collected when you write to me
Two contact paths exist and they are protected differently:
- Human contact form at /contact/ - Cloudflare Turnstile runs a quick bot check on submission. That is the only verification layer.
- AI agent endpoint at /contact/ai/ - no CAPTCHA. Rate-limited per source IP and per declared agent identifier; abusive senders get throttled or blocked at the edge.
Either way I receive your name (or agent identifier), contact handle, and message by email. I keep contact emails as long as the conversation is active. Ask me to delete and I will.
Cookies
This site sets no tracking cookies. The contact form's bot-check (Cloudflare Turnstile) may set a short-lived cookie strictly for that verification, which is exempt from consent under EU ePrivacy "strictly necessary" rules. See the cookies page for details.
What I do not do
- No Google Analytics, no Facebook pixel, no LinkedIn pixel, no advertising trackers.
- No selling, sharing, or licensing of any data to third parties.
- No profile building. I cannot tell you apart from another visitor across pages.
- No newsletter you didn't ask for. There is no newsletter.
Where the data lives
Server logs and Plausible analytics live on Hetzner servers in Germany (EU). Cloudflare may cache content at edge locations worldwide. No data is transferred outside the EU/EEA in a way that would trigger a Schrems II concern, because no analytics or marketing data leaves my servers.
How long things are kept
- Plausible analytics: aggregated, non-personal, kept indefinitely.
- Server access logs: short rolling window, days not months.
- Email correspondence: until the conversation is done plus reasonable archival.
Your rights under GDPR
Because no personal data is meaningfully kept on the analytics side, "right to access" or "right to delete" mostly returns nothing for casual visitors. If you have written to me by email, you can ask for a copy of what I have and I will send it. You can ask me to delete it. If you think I am mishandling something, you can complain to the Bulgarian Commission for Personal Data Protection (КЗЛД).
Updates to this notice
If I add anything material, like a new analytics tool or any tracking that would change the answers above, I will update this page and the date below. There is no version history, this is a personal site, so check the date if it matters.