Privacy
Privacy notice
Last updated: 14 October 2026
This notice explains what personal data may be processed when you visit tomaszdobras.com. The controller is Tomasz Dobras.
Controller and contact
Tomasz Dobras, Lübecker Straße 43, 39124 Magdeburg, Germany. Email: dobrastomasz98@gmail.com.
Technical data when you visit
When you open the site, hosting and security services may process technical connection data needed to deliver and protect it. This may include an IP address, date and time, requested URL or page, referrer, browser and device information, and status or security information. The purposes are site delivery, reliability, troubleshooting, and abuse prevention. The legal basis for processing I determine is my legitimate interest in operating a secure and reliable website (GDPR Article 6(1)(f)).
The site is hosted through ChatGPT Sites. OpenAI processes hosted data to host, maintain, and support the site; technical hosting and infrastructure providers, including Cloudflare, may help deliver and secure it. The site itself does not write IP addresses or raw visit logs into its reading statistics. Providers’ infrastructure may process or log technical request data separately.
Aggregated usage counts
When a chapter becomes visible, and for certain continuation and support links, the site sends a count event containing language, page placement or action, and chapter to its own counter. Rapid repeats are restricted. These totals measure chapter openings and link use, not unique people or completed reading. It stores daily totals by these categories only. The statistics database does not store visitor IDs, individual click histories, or IP addresses. For abuse prevention, the server briefly converts the IP address into a randomly salted key in memory. This buffer uses one-minute windows, resets when a new window begins, and is not written to the statistics database. The counter is skipped when the browser signals Do Not Track or Global Privacy Control. These statistics help improve site navigation and content; where personal data is processed for this purpose, I rely on my legitimate interest in doing so (GDPR Article 6(1)(f)). No automatic deletion period is currently configured for these aggregate daily totals.
Infrastructure security cookie
Cloudflare may set the __cf_bm cookie to protect against automated abuse. The provider states that it expires after 30 minutes of continuous inactivity. This security cookie belongs to the infrastructure and is not a visitor ID used by the reading counter. Further details are in the Cloudflare cookie documentation linked below.
Display preferences and reading position in your browser
The site stores your selected light or dark appearance, text size, and last reading position for each chapter and language in your browser’s local storage (localStorage). Text size applies across chapters; reading positions are kept separately for each language. These preferences and positions are not sent to the server or synced between devices. You can clear them in your browser settings. The site does not embed advertising pixels or third-party analytics scripts.
Recipients, hosting, and international processing
Recipients may include OpenAI and its sub-processors for ChatGPT Sites, as well as hosting and infrastructure providers. The providers’ applicable terms and privacy notices govern their processing. Under the ChatGPT Sites DPA, EEA data transferred outside the EEA may be processed under Standard Contractual Clauses or an adequacy decision. See the provider information linked below.
If you follow an external link, for example to Instagram or Buy Me a Coffee, you leave this site. The relevant provider then processes data under its own responsibility and privacy notice. These services are not embedded here as widgets.
How long data is kept
Technical server and security logs are handled by hosting and infrastructure providers under their applicable settings, contracts, and retention rules. This site’s source does not configure a fixed period for provider logs, so I cannot state a specific duration. Aggregate daily counts are stored as totals and currently have no automatic deletion configured. Browser display preferences and reading positions remain until you clear them or your browser removes them.
Your rights
Subject to applicable data protection law, you may request access, correction, deletion, restriction of processing, and data portability, and object to processing based on legitimate interests. If processing is based on your consent, you may withdraw it for the future. To exercise your rights, contact me at the email address above.
You may also lodge a complaint with a data protection supervisory authority, including the Data Protection Commissioner for Saxony-Anhalt.
Provider information
More information about provider processing is available in their terms and privacy notices: