Privacy Policy

Last updated September 25, 2026

This site collects very little about you. There are no ads, and I don't sell anything about you or pass it on for money.

Who is responsible

The controller is me, Yehor Brodskiy (Бродський Єгор), a registered sole proprietor (FOP) in Kyiv, Ukraine 02081. Any question about your data, and any request, goes to yehor@yeskiy.com.

What I collect

Contact form: Whatever you type in: your name, your email, your company and budget if you want to share them, and the problem itself. The message and a way to reply are the parts I really need, because without them I can't answer. I use it to reply and to take your request further.
Server logs: The usual web server records: IP address, time, the page requested and the browser type. They're there for security and to keep the site running, and they don't stay long.
Session analytics: Microsoft Clarity, and only if you agree to it. I'm only looking at how you interact with the site, to make sure there are no errors to be found during your sessions here, and if there are, to fix them. Clarity records the clicks, scrolls and mouse movement, the pages you open, the errors on them, and a rough location from your IP address. Numbers and email addresses are masked, and so is anything you type into a form.

No profiling, and no automated decision about you, of any kind.

Why I'm allowed to collect it

It depends on what the data is for. A quote or a proposal request is a step you asked me to take before a contract. For a general question, it's my legitimate interest in replying to whoever wrote to me. Consent is not the legal basis for the contact form, and I don't ask for it: a reply needs the data, so there's no real free choice to offer you.

Clarity is different. It rests on your consent only, both under the GDPR and under the Ukrainian law, so it doesn't load until you say yes, and you can take that yes back at any time. Marketing email from your enquiry details would be a separate purpose, and that one needs your consent as well.

Do you have to give it

No law and no contract makes you. It's your call. Just without a message and a way to reply, I have nothing to answer and nowhere to send the answer. Saying no to Clarity costs you nothing, the site works the same.

Who else gets it

Nobody buys it, and nobody gets it for marketing. The site is self-hosted: the frontend and the CMS run on my own infrastructure. Cloudflare sits in front of it, for DNS and at the edge, so Cloudflare sees your IP address when you load a page. What you send through the contact form is stored in my own CMS, readable from the admin side only.

If you agree to Clarity, Microsoft gets the session data. Microsoft runs Clarity and is a controller for that data as well, under the Microsoft Privacy Statement. The data can be stored and processed in the United States. Microsoft Corporation takes part in the EU-US Data Privacy Framework, with its UK and Swiss extensions, and uses the EU standard contractual clauses for other transfers. Under the Ukrainian law, that transfer rests on your consent too.

Cookies

The site keeps a few settings in your browser, such as your cookie choice and the light or dark theme. Clarity adds its own cookies, and only after you agree. The Cookie Policy has the full list.

How long I keep it

Ukrainian law doesn't set a fixed period here. It says data stays in an identifiable form no longer than the lawful purpose of collecting it needs, and that's the rule I follow. So there are no fixed periods, it's purpose-based only. An enquiry stays while we're in contact, and while there's still a reason to go back to it, such as an engagement or an invoice that came out of it. Log files are rotated often. Once the purpose ends, the record is deleted.

Clarity is the one exception, because Microsoft sets its periods: a recording stays for 30 days, and a favorited recording or a random sample of recordings for up to 9 months.

Your rights

Both the GDPR and the Ukrainian law give you rights here. You can ask:

to know what I hold about you, where it came from, what it's for and who received it
for a copy of it
to correct it or erase it
to object to the processing, or to have it restricted
to get it in a portable form (this one is a GDPR right)
to withdraw your consent, where consent was the basis

For Clarity, withdrawing is simple: change your answer in the cookie settings, and Clarity stops and deletes its cookies. For anything else, write to yehor@yeskiy.com. It's free of charge. The deadline is one month under the GDPR, and 30 calendar days under the Ukrainian law.

If you want to complain

You can go straight to the authority, you don't have to ask me first. In Ukraine that's the Commissioner for Human Rights of the Verkhovna Rada, at 01008, Kyiv, vul. Instytutska 21/8: hotline@ombudsman.gov.ua, hotline 1678, or +380 44 299 7408 from abroad. A court is the other route. If you live in the EU or the UK, complain to the data protection authority where you live.

Changes to this page

If the way I handle data changes, this page changes with it, and so does the "last updated" date.