Privacy Policy

Last updated: May 27, 2026

We care about your privacy. This Privacy Policy explains how tinkerstack.dev treats personal data and local device storage.

Because we do not track you, this policy is short, transparent, and written in plain language.

1. Data Controller

The controller of any data relating to this website is:

• Name: Michał Sadurski (Owner of tinkerstack.dev)
• Contact Email: [email protected]

2. Zero Cookies & Strictly Necessary Storage

We do not use any traditional tracking cookies, marketing pixels, or analytical trackers.

The website uses a single first-party Local Storage key to save your explicit interface preferences:

• Key: tinkerstack-theme
• Type: First-party browser localStorage
• Purpose: Remembers whether you selected Light Mode or Dark Mode, preventing an annoying visual flash when navigating between pages.
• Legal Basis: This storage is Strictly Necessary to deliver the user-requested interface layout (under Art. 6(1)(f) GDPR and Article 173 of the Polish Telecommunications Law). It does not track your behavior or identify you.

3. Data Processing & Hosting

This website is built statically and hosted using Cloudflare Pages, a service provided by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA).

When you visit this website, Cloudflare serves the static files and may process technical metadata (such as your IP address, browser type, and time of access) in server logs to ensure security, network stability, and DDoS protection.

• Legal Basis: Cloudflare processes this data on our behalf under a signed Data Processing Addendum (DPA) based on Art. 6(1)(f) GDPR (our legitimate interest in hosting a secure and stable website).
• Transfers Outside the EEA: Cloudflare transfers data to the United States. They secure these transfers through their certification under the EU-US Data Privacy Framework (DPF) and standard contractual clauses (SCCs).

4. Your Rights Under the GDPR

As an EU visitor, you hold the following rights under the General Data Protection Regulation:

• Art. 15 GDPR: Right to access any data we process.
• Art. 16 GDPR: Right to rectify inaccurate data.
• Art. 17 GDPR: Right to erasure ("right to be forgotten").
• Art. 18 GDPR: Right to restrict processing.
• Art. 21 GDPR: Right to object to processing.
• Art. 7(3) GDPR: Right to withdraw consent (not applicable here, as no consent-based tracking occurs).

To exercise any of these rights, please contact us at [email protected].

You also have a legal right to lodge a complaint with the supervisory authority:

• Prezes Urzędu Ochrony Danych Osobowych (PUODO)
• Address: ul. Stawki 2, 00-193 Warszawa, Poland
• Website: https://uodo.gov.pl

5. Changes to This Policy

We may update this policy occasionally as the site evolves. Any changes will be reflected by updating the "Last updated" date at the top of this page.