Privacy notice
Last updated 7 September 2026
This is a personal portfolio. It has no accounts, no newsletter, no comments and no advertising. In normal use it collects no personal data about you beyond the server records any website needs to serve a page.
Who is responsible
Ivo Zhelev, Stara Zagora, Bulgaria, acting as an individual, is the controller for the processing described here. You can reach me by email — .
What is processed, and why
| Data | Why | Legal basis |
|---|---|---|
| Server records: IP address, time, page requested, browser user-agent | Delivering the page and protecting the site from abuse and attack. Kept briefly by the host and not used to build any profile. | Legitimate interest in a working, secure site (GDPR Art 6(1)(f)) |
| Your display settings and your cookie answer | Kept on your own device so the site behaves the way you left it. Never sent to a server. | Necessary for the service you asked for; the record of your answer is kept to honour it |
| If you allowed statistics: the page viewed, the country the request came from, the referring link, browser and device type, and how fast the page rendered | Counting visits, so I know whether anyone reads this. Anonymous and aggregate — no cookie, no identifier, nothing stored on your device, and no way to recognise you on a later visit or on any other site. | Your consent (GDPR Art 6(1)(a)), withdrawable at any time from the menu |
| Anything you write to me | Answering you. Kept only as long as the conversation is meaningful. | Your request, and legitimate interest in replying |
There is no advertising, no profiling and no automated decision-making on this site, and nothing is sold or shared with anyone for their own purposes. The statistics above are the only measurement of any kind, they are optional, and they are off unless you turned them on.
Who else is involved
- Cloudflare — hosting, the database, and storage for images and pages. Everything this site runs on is theirs, and they handle the server records above. Requests are served from the network edge, usually Sofia; the company is in the United States, so transfers rely on the standard safeguards (EU Standard Contractual Clauses / Data Privacy Framework). The database holds the site’s own text and settings and nothing about visitors.
- Cloudflare Web Analytics — the same company again, in a second role: if you allowed statistics, a small script of theirs reports the anonymous page view described above. It is the only third-party script on this site. It sets no cookies and gives you no identifier, so there is nothing for them to accumulate about you between visits.
- Google — sign-in for the private admin area, used by me alone, and Search Console, which reports the search terms that led people here as aggregate counts. Neither involves a script on this site and neither can see you individually.
Fonts are served from this site rather than from a font provider, so no third party learns you were here.
Your rights
Under the GDPR you may ask for access to your data, correction, erasure, restriction, portability, and you may object to processing based on legitimate interest. Because this site does not identify you, I usually hold nothing that could be tied to you — but if you have written to me, those messages are covered and I will act on any of these requests.
If you think something here is wrong, you can complain to the Commission for Personal Data Protection (CPDP) in Bulgaria, or to the supervisory authority where you live.
Where you are
Everyone is offered the same choice, whichever country they visit from, because that is the simplest way to meet the strictest rule that might apply. If you are in the EU, the EEA or the UK, nothing non-essential runs without your permission. If you are in a US state with a privacy law, there is nothing to opt out of — no data is sold or shared for targeted advertising — and a Global Privacy Control signal is honoured regardless.
Children
This site is not aimed at children and does not knowingly collect anything from them.