Go to content

Privacy Policy

Who we are

The owner and administrator of the website kemuri.codes is Marcin Dymek, operating under the brand KemuriCodes, based in Gdynia, Pomeranian Voivodeship, Poland.

Website address: https://kemuri.codes
Contact email: contact available via contact form.

What data we collect and why

Contact forms and briefs

When you fill out a contact form or brief on our site, we collect the data you provide (e.g., name, email address, message content, project details). We use this data solely to respond to your inquiry and for potential collaboration. We do not share it with third parties for marketing purposes.

Local analytics (server statistics)

We use a proprietary, local analytics system hosted on the same server as the website. We do not use Google Analytics, Google Tag Manager, or any external analytics services by default.

Before giving consent (cookieless mode):

  • We collect only aggregated, anonymous data on page views.
  • We do not store any cookies or identifiers on your device.
  • We do not retain IP addresses in our database.
  • This data does not allow for the identification of a specific user.

After giving consent for analytics (full mode):

  • We store a pseudonymous session and visitor identifier (first-party cookie kc_vid).
  • We collect details: paths of visited pages, engagement time, scroll depth, CTA clicks, forms, outgoing links, and downloaded files.
  • Data is stored on our server and is not transmitted to third parties.
  • Retention: raw events deleted after 30 days, sessions after 90 days, aggregated statistics after 24 months.

Optional tracking scripts (if active)

If external analytics tools (e.g., Google Analytics 4, Google Tag Manager, Microsoft Clarity) are configured in the site settings, they are loaded only after obtaining your explicit consent and run in an isolated web worker (Partytown technology) to minimize impact on site performance.

Server logs

The server automatically logs information such as IP address, browser type, date, and time of visit. This data is used to maintain security and technical diagnostics and is stored according to the hosting provider’s policy.

Cookies

For detailed information about the cookies used on this site, please refer to our Cookie Policy.

Legal basis for processing

  • Consent (art. 6 para. 1 lit. a GDPR) — analytics after clicking “Accept” in the consent banner, optional tracking scripts.
  • Legitimate interest (art. 6 para. 1 lit. f GDPR) — anonymous cookieless aggregates, server security, system logs.
  • Performance of a contract / taking action at the request (art. 6 para. 1 lit. b GDPR) — data provided in the contact form or brief to fulfill the inquiry.

Google Consent Mode v2

Our website implements Google Consent Mode v2. This means that:

  • By default, the signals analytics_storage, ad_storage, ad_user_data, ad_personalization are set to denied.
  • Only after your explicit consent are they changed to granted.
  • This applies to both our local analytics and any potential Google scripts.

Data Sharing

We do not sell, exchange, or transfer your personal data to third parties for commercial purposes. Data may only be shared:

  • Hosting providers (in terms of server logs).
  • Analytics tools (GA4, GTM, Clarity) — only after your explicit consent.
  • Government authorities — only in cases required by law.

Your Rights (GDPR)

According to GDPR, you have the right to:

  • Access — obtain information about the processed data.
  • Rectification — correct inaccurate data.
  • Deletion — request the deletion of your data (right to be forgotten).
  • Restriction of processing — request to limit their processing.
  • Data portability — receive data in a machine-readable format.
  • Objection — raise an objection to processing based on legitimate interest.
  • Withdrawal of consent — at any time, e.g., by changing cookie settings at the bottom of the page.

To exercise the above rights, please contact us via the contact form.

Data Retention Period

  • Contact forms / brief: we retain data as long as necessary to handle the inquiry, no longer than 12 months from the last contact.
  • Local analytics: raw events — 30 days, sessions — 90 days, aggregates — 24 months.
  • Server logs: according to the hosting provider’s policy (usually 30–90 days).

Security

The kemuri.codes website uses an encrypted HTTPS connection. We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or destruction.

Changes to the Privacy Policy

We reserve the right to update this policy. We will inform you of significant changes through a consent banner (revision number change) or a notice on the website.

Last updated: February 14, 2026.