Privacy policy
This policy explains what personal data is processed when you visit this website, why, and what your rights are. I've tried to keep it short and in plain language.
Who is responsible
This website is run by Appy Sharma, a private individual based in Malmö, Sweden, who is the data controller for the processing described here. You can reach me at appyeu@outlook.com.
What is collected and why
Analytics — only with your consent
If you click “Accept” in the cookie banner, the analytics service PostHog stores a cookie and an identifier in your browser so I can understand how the site is used:
- Pages you visit, how far you scroll and read, links and buttons you click, and how long you stay.
- Your device type, browser, screen size, the referring website, and your approximate location (country and city, derived from your IP address).
- Page loading performance and technical details of errors in your browser, so I can fix bugs.
- Session recordings: how you scroll, click and move through pages, so I can see where the site is confusing or broken. Anything you type into form fields is masked and never recorded.
Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time with “Cookie settings” at the bottom of every page.
Anonymous visit counts — before you choose, or if you decline
Until you accept, or if you decline, PostHog runs in cookieless mode: nothing is stored on your device, there are no session recordings, and visits are counted anonymously using a hash of your IP address and browser that is reset every day, so you cannot be recognised across days. Legal basis: my legitimate interest in knowing how many people visit the site (Article 6(1)(f) GDPR). You can object to this at any time by emailing me.
All analytics data is stored in the European Union (PostHog Cloud EU, Frankfurt, Germany).
Newsletter
If you subscribe, your email address and the language you subscribed in are stored by my newsletter provider, Brevo, on servers in the European Union, so I can email you new posts.
Brevo records when newsletter emails are delivered and opened and which links are clicked, so I can see which posts readers find interesting.
Legal basis: your consent (Article 6(1)(a) GDPR). Every email contains an unsubscribe link. You can also email me to have your data deleted completely.
Emails you send me
If you email me, I use your address and message only to reply and keep the conversation. Legal basis: legitimate interest in answering you.
Hosting and delivery
Like any website, the servers that deliver this site process your IP address and request details (such as the page requested and your browser) to send you the page and to protect the site against abuse, and may keep short-lived technical logs. Legal basis: legitimate interest in running a secure, working website.
Cookies and browser storage
- PostHog analytics cookie and storage (names starting with “ph_”): an anonymous identifier and session information. Only set after you click “Accept”. Kept for up to one year.
- Your cookie choice: remembers whether you accepted or declined, so you aren't asked on every page. Necessary.
- “lang” cookie: remembers a language you picked from the language menu. Kept for one year. Only set when you choose a language.
- “theme” browser storage: remembers light or dark mode. Stays on your device.
No advertising cookies or third-party tracking cookies are used.
Who receives your data
I use these service providers, who process data on my behalf under data processing agreements:
- Vercel Inc. (USA) — website hosting.
- Sanity AS (Norway) — content management and image delivery.
- PostHog (EU Cloud, Germany) — analytics, session recordings and error tracking.
- Brevo (Sendinblue SAS, France) — newsletter, only if you subscribe.
Where data is transferred outside the EU/EEA, it is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses, as applicable. I never sell your data or use it for advertising.
How long data is kept
- Analytics data and session recordings: only as long as useful to understand and improve the site, and never longer than the retention period of my PostHog plan.
- Newsletter: until you unsubscribe or ask me to delete your data.
- Emails: as long as needed for the conversation.
Your rights
Under the GDPR you have the right to access the data held about you, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting earlier processing. To use these rights, email appyeu@outlook.com.
You also have the right to lodge a complaint with a supervisory authority — in Sweden, the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se) — or the authority where you live.
Children
This website is not aimed at children, and I don't knowingly collect data from them.
Changes
If this policy changes, the new version will be published here with an updated date at the top.