Last updated: 12 November 2026
Data controller
The controller of personal data processed on neoneon.online is Paweł Kuligowski. For any questions about your personal data, write to ask@neoneon.online.
Visit statistics (Umami)
I use Umami Cloud (Umami Software, Inc.) to count visits. Umami does not store cookies or any other data in your browser and does not track you across sites or across days. Your IP address and browser data are used only to create an anonymous visit identifier and are not stored. I only see aggregated data: number of visits, pages viewed, referring site, country, device type, operating system and browser. Bot traffic is filtered out.
Purpose: understanding which content is read and improving the site. Legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR). You can block the statistics, e.g. with a script-blocking extension.
Performance measurement (Vercel Speed Insights)
I use Vercel Speed Insights (Vercel Inc.) to check how quickly the site loads and responds. On the first page you open during a visit, a script measures performance indicators in your browser, such as when the first content and the largest element appear, server response time, layout shifts and how quickly the page reacts to a click, and sends them to Vercel. Each measurement includes: the page address without parameters (e.g. without a search phrase), a general address pattern (e.g. "article"), a description of the page element the measurement refers to, approximate connection speed, device type, operating system, browser and country. Speed Insights does not store cookies or any other data in your browser, does not assign you an identifier and does not link measurements from different pages. Measurements are not linked to your IP address. I only see aggregated data.
Purpose: keeping the site fast and working smoothly. Legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR). You can block the measurement, e.g. with a script-blocking extension.
Comments
When you post a comment, you provide a name or nickname, an email address and the comment text. The name and text are published under the article once approved; the email address is never published and is used only to contact you about the comment if needed. Legal basis: the controller’s legitimate interest in hosting discussion under articles (Art. 6(1)(f) GDPR). Comments are kept until they are deleted, including at your request.
Contact form
When you send a message, you provide your name, email address and the message text. I use them only to reply. Legal basis: the controller’s legitimate interest in answering correspondence (Art. 6(1)(f) GDPR). Messages are kept for as long as the correspondence requires.
Spam protection (Cloudflare Turnstile)
The comment and contact forms are protected by Cloudflare Turnstile (Cloudflare, Inc.). Turnstile checks whether a human is submitting the form by analysing, among other things, your IP address and browser characteristics. It is not used for advertising or tracking and loads only on pages with a form. Legal basis: the controller’s legitimate interest in protecting the site from spam and abuse (Art. 6(1)(f) GDPR). More: Cloudflare privacy policy.
Email notifications (Resend)
The content of a comment or contact message (including the name and email address) is delivered to me by email sent through the Resend service. Resend does not send any messages to you.
Hosting and content storage
The site runs on Vercel Inc. infrastructure, which processes IP addresses in server logs to keep the site running and secure. Site content, comments and contact messages are stored in Sanity (Sanity AS).
Recipients and transfers outside the EEA
Data may be processed by the providers listed above, acting on my behalf: Umami, Cloudflare, Resend, Vercel and Sanity. Some of them are based in the USA. Transfers outside the European Economic Area are based on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.
Cookies and browser storage
The site does not use analytics or advertising cookies. It only stores settings needed for the site to work: your chosen language (NEXT_LOCALE cookie) and light or dark theme (browser storage). These do not require consent.
Your rights
You have the right to access, rectify and erase your data, to restrict its processing and to object to processing based on legitimate interest. To exercise these rights, write to ask@neoneon.online. You can also lodge a complaint with a supervisory authority; in Poland this is the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw).