Privacy
The site works without collecting anything about you. Analytics only runs if you say yes in the cookie banner, and I never sell data or share it for advertising.
Last updated 5 November 2026.
Who is responsible
The controller for this site is my business:
PETRACH, obrt za računalno programiranje, vl. Vedran Petrač
Ulica Bele Bartoka 95, 31000 Osijek, Croatia
OIB 72978641948
[email protected]
For anything about your data, write to [email protected]. I am a one-person business, so you will hear back from me directly. I am not required to appoint a data protection officer. More about the business is in the Impressum.
When you visit the site
Hosting. The site runs on a server I rent from Hetzner Online GmbH in Falkenstein, Germany. To send you a page, the server has to see your IP address, the page you asked for and your browser's user agent. My server does not keep an access log of visits. It keeps short technical error logs, which are overwritten once they reach 30 MB.
Cloudflare. Cloudflare, Inc. sits in front of the site as a network and security layer, and stores and serves its images and files (files.petrach.dev). It processes your IP address and request data to deliver pages and block attacks, and may set a short-lived __cf_bm cookie to tell people from bots. Cloudflare acts as my processor under a data processing agreement.
Fonts and scripts. Fonts and scripts are served from petrach.dev itself. No Google Fonts or other third-party files load unless you allow analytics.
Legal basis: my legitimate interest in running a secure, working website (Article 6(1)(f) GDPR).
Analytics, only with your consent
If you allow Analytics in the cookie banner, I load Google Tag Manager and Google Analytics 4 from Google Ireland Limited. They tell me which pages get read, how people found the site (for example a search engine or a link), which contact links get clicked (Say hi, the email address, Copy email), and roughly where visitors come from (country and city level), with device and browser type. Google Analytics 4 does not store your full IP address. I use this only to see what is useful and what to write next.
The banner also has a Marketing choice, for measuring which ads bring people here. I don't run any ads right now, so nothing uses it yet. Until you allow it, the site tells Google that ad storage, ad user data and ad personalisation are denied. If I add ad tags, I will list them here and the banner will ask you again.
If you click Reject all, or ignore the banner, nothing from Google loads. Under Manage you can allow Analytics and Marketing one by one.
Legal basis: your consent (Article 6(1)(a) GDPR, and the Croatian Electronic Communications Act for storing data on your device). You can withdraw it at any time under Cookie settings in the footer. When you do, the site deletes the Google cookies and stops loading the tags. Withdrawing does not affect what was collected before.
Google Analytics keeps this data for 14 months, then deletes it.
Cookies
| Name | Set by | What it does | How long | Needs consent |
|---|---|---|---|---|
cc_cookie | petrach.dev | Remembers your answer in the cookie banner | 12 months | No, it is needed to respect your choice |
__cf_bm | Cloudflare | Tells people from bots | 30 minutes | No, it is needed for security |
_ga | Google Analytics | Tells one visitor from another | 2 years | Yes |
_ga_<ID> | Google Analytics | Keeps track of your session | 2 years | Yes |
I ask again after 12 months, or sooner if what the site collects changes.
When you email me
If you write to [email protected], I receive your email address, your name if you give it, and whatever you write. Mail to this address is forwarded by Namecheap, Inc., my domain registrar, to my mailbox. I use it only to answer you and, if we work together, for that work. I delete conversations that lead nowhere after two years, and keep business correspondence as long as Croatian tax and accounting law requires.
Legal basis: taking steps you asked for before a contract (Article 6(1)(b) GDPR), or my legitimate interest in answering messages (Article 6(1)(f) GDPR).
Who else gets data
Only the services named above: Hetzner (hosting), Cloudflare (network, security and file storage), Namecheap and my mailbox provider (email), and Google (analytics, only with your consent). I don't sell data and don't share it with anyone else, unless the law requires me to.
Some of these companies are based in the United States. Transfers there rely on the EU–US Data Privacy Framework, or on the European Commission's standard contractual clauses where a company is not certified.
Your rights
Under the GDPR you can ask me to:
- show you the data I hold about you, and give you a copy (access and portability)
- correct it or delete it (rectification and erasure)
- limit what I do with it, or object to it (restriction and objection)
- withdraw your consent at any time, through Cookie settings or by email
Write to [email protected]. I answer within a month.
If you think I handle your data wrongly, you can complain to the Croatian data protection authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb,azop.hr. You can also complain in the EU country where you live.
No profiling
I make no automated decisions about you and build no profiles.
Changes
When the site starts collecting something new, I update this page and the date at the top, and the cookie banner asks you again.