privacy & cookies

What this site collects.

Short version: nothing, unless you accept analytics. There are no accounts, no logins, no forms, no newsletter, and nothing to sign up for.

Who is responsible

Yonko Tsonev, an individual based in Sofia, Bulgaria, acting as the data controller for this site. This is a personal research site, not a company or an organization.

The way to reach me about anything on this page is LinkedIn or GitHub. Both are linked in the footer of every page.

Analytics, and only if you agree

If — and only if — you press accept on the consent banner, this site loads Google Analytics 4, which sets cookies (_ga and similar) and records things like which pages you opened, roughly where in the world you are, and what kind of device and browser you used.

Before you accept, nothing is sent. This site uses what Google calls basic consent mode: the analytics script is not downloaded at all until you agree. If you refuse, or if you ignore the banner entirely, your browser never makes a request to Google and no cookie is set. Refusing is one click, in the same place and the same size as accepting.

The legal basis is your consent, under Article 6(1)(a) GDPR and the Bulgarian implementation of the ePrivacy Directive. You can withdraw it at any time — see below — and withdrawing is as easy as giving it.

Google Analytics data is processed by Google, which stores and processes it outside the EU, including in the United States. Google LLC is certified under the EU–US Data Privacy Framework, which is the transfer mechanism this relies on. Google acts as my processor and also uses the data for its own purposes as described in its own policies. Retention is set to the shortest option GA4 offers.

What the host sees regardless

This site is served by Cloudflare Pages. Like any web host, Cloudflare processes the requests needed to deliver the page and keeps its own aggregate traffic statistics. That happens at the network level for every visitor, is not something a banner can switch off, and is not something I can turn off either. It sets no advertising cookie and does not identify you to me — I see counts, not people.

What there isn't

  • No accounts, logins, or profiles.
  • No contact form, mailing list, or newsletter.
  • No advertising, ad networks, or ad cookies. The three advertising signals in the consent configuration are set to denied permanently and there is no path in the code that grants them.
  • No embedded third-party content — no YouTube players, no social widgets, no comment system, no external images.
  • No fonts fetched from Google. They are downloaded at build time and served from this domain.
  • No selling or sharing of anything, because there is nothing to sell.

Changing your mind

Use the cookie choices button in the footer of any page. It clears your stored answer and brings the banner back, so you can switch either way. Going from accept to refuse also deletes the Google Analytics cookies, switches the analytics tag off, and reloads the page so that nothing is left running.

Your answer is remembered in your browser's local storage under the key yt-consent. That value never leaves your device. Clearing your browser data removes it and you will be asked again.

Your rights

Under GDPR you have the right to access, correct, erase, restrict, object to, and port your personal data, and to withdraw consent at any time. In practice, if you have not accepted analytics I hold nothing about you at all, and if you have, it is pseudonymous analytics data that I cannot connect to your name. Requests go through either of the contact channels above.

If you think I have handled something badly, you can complain to the Bulgarian Commission for Personal Data Protection, or to the supervisory authority in the EU country where you live.

Changes

If this notice changes in a way that affects what is collected, the consent banner will ask again rather than assuming your previous answer still applies. Last updated August 2026.

← back to the research