Privacy Policy

The site is operated from Poland (EU). If you have questions, requests, or concerns about privacy, email privacy@turczynski.pl. Messages sent there are reviewed regularly and typically receive a response within seven days.

When you visit the site, standard server logs capture:

• IP address
• User agent and requested URL
• Timestamp and limited diagnostic headers

These logs are used strictly for security monitoring, debugging, and ensuring availability. Logs are rotated and retained for a short period unless a specific security investigation requires a longer retention window.

Two diagnostic features also keep records in the site's database.

Render probe

The render probe at /probe/render/ is a test page, not linked from the rest of the site, used to measure how search engines, testing tools and browsers fetch and render a page. While it is open, the page sends reports about its own rendering back to the site. Each report stored in the probe_beacons table holds:

• the time it was received
• the IP address of the device that sent it, and the X-Forwarded-For header as received
• the user agent
• what triggered the report (for example page load or a timer) and the test label from the page address, if any
• the report itself: a snapshot of the rendering environment, including:
  • the full address of the probe page, query string included
  • the graphics card vendor and model, as reported by WebGL
  • which of a fixed list of common fonts are installed on the device
  • the device model, operating system and version, processor architecture and full browser version, from the browser's client hints
  • browser languages, locale, time zone, platform, screen and window sizes, device hardware hints (such as processor count and memory) and connection type
  • permission states (location and notifications), display and input characteristics (such as pixel density, color depth, touch support and color-scheme preference), timings, the files the page loaded, and the results of the page's rendering tests

A report is stored up to 32 KiB; a longer one is cut at that size and marked as cut, with its full size recorded.

Records older than 30 days are deleted when the next report is stored, not on a schedule, so in a quiet period they can stay somewhat longer.

These reports are also written to the platform's function logs, together with the IP address, network (AS number and organisation) and country of the device that sent them; those logs follow the server-log retention above.

To test what the browser supports, the probe page also writes a probe=1 test value to a session cookie, local storage and session storage, and registers a service worker limited to the probe's own address. None of these holds an identifier.

Security-policy violation reports

Browsers can send a report when a page breaks the site's Content Security Policy, for example when a browser extension injects a script. These reports are used to find and fix problems in that policy. Each report stored in the csp_reports table holds:

• the time it was received, the Cloudflare request ID and the Cloudflare data center that handled it
• the user agent
• the address of the page where the violation happened, the address of the blocked resource, the rule it broke, and the policy in force

Your IP address is not stored with these reports. They are not deleted automatically: they are kept until they are deleted by hand.

These reports are also written to the platform's function logs, together with the referring page, the file that caused the violation and a short sample of the blocked code, if the browser sends them; those logs follow the server-log retention above.

• No marketing, analytics, or behavioral tracking cookies are set.
• The site does not fingerprint visitors to identify or track them, and uses no cross-site tracking techniques. The render probe collects device characteristics, stored next to the IP address, only to test rendering, as described above.
• Any essential cookies that may appear in the future will exist solely to deliver requested functionality and will be documented here.

Processing is based on legitimate interest in operating a secure website, responding to inbound communication, and safeguarding the infrastructure. Data from emails you send is processed only for the purpose of replying to the original inquiry or resolving operational issues.

• Server logs: kept briefly for diagnostics unless additional security review is required.
• Render probe reports (probe_beacons): records older than 30 days are deleted when the next report is stored, so in a quiet period they can stay somewhat longer.
• Security-policy violation reports (csp_reports): no automatic deletion; kept until deleted by hand.

If you are in a jurisdiction that grants data subject rights (such as the EU), you may request access, correction, deletion, or restriction of your personal data. Email privacy@turczynski.pl with enough detail to help locate the relevant records: the approximate time and your IP address (render probe reports can only be found by these two), the page visited, and, for emails, the address you wrote from.

This policy may be updated as the site evolves. Material changes will be reflected on this page with a revised effective date.