/privacy · updated August 14, 2026

Privacy policy

This site is run by Maciek Stopa. You can reach me at maciek@maciekstopa.com.

Analytics

I use two analytics tools to see which posts people read and how they found them. Neither is used for advertising, and I never sell the data or pass it to anyone beyond what is described here. The difference between the two matters for your privacy: Umami data stays entirely on my own server, while Google Analytics data is processed by Google.

Self-hosted Umami

Umami runs on my own server in Frankfurt (AWS eu-central-1), and the data it collects never leaves my infrastructure: no third party receives it, and it stays in the EU. It is cookieless and stores no personal identifiers. It records the pages you visit, the link that brought you here, your browser and device type, and your country (derived from your IP address, which is not stored). None of this can identify you or follow you across sites or across days, which is why it needs no consent banner and runs for every visitor.

Google Analytics

I also use Google Analytics 4, with Google Consent Mode. Until you accept the cookie banner, no cookies are set and no identifiers are stored: the site sends only anonymous, cookieless pings that Google uses for aggregate statistical modeling and cannot link to you or to your other visits.

If you accept, Google Analytics additionally collects:

pages you visit and links you click
approximate location (country and city, derived from your IP; the full IP address is not stored)
device, browser, and how you arrived (search, link, direct)

This data is aggregated and I cannot identify you from it. It is processed by Google Ireland Ltd (see the Google privacy policy) and retained for 14 months.

Use the Cookie settings button in the footer to reopen the banner and decline, or clear this site's cookies in your browser. Consent only ever applies to Google Analytics; declining never limits what you can read here.

If you subscribe to new-post emails, I store your email address, the subscription timestamp, and which signup form you used. That is all. The list exists only to send you one email per new post: no marketing, no profiling, and the address is never shared beyond the processor below.

You only join the list by submitting the form and then confirming from your own inbox (double opt-in). That confirmation is the legal basis: consent, which you can withdraw at any time. Every email contains a one-click unsubscribe link, and unsubscribing takes effect immediately.

The list is managed by Buttondown (a US company) acting as my processor under a signed Data Processing Agreement; emails are sent from newsletter.maciekstopa.com. If you want your address deleted entirely rather than just unsubscribed, email me and I will remove it.

Contact

If you email me or use the contact form, I use your message and address only to reply. Your address is never added to the newsletter list unless you subscribe yourself through the signup form.

Your rights

Under the GDPR you can ask me what data I hold about you, ask for its deletion, and complain to your local data protection authority.

Last updated: August 14, 2026.