No ad tracking
No sale of personal data or advertising profiles.
Privacy, plainly
A small data footprint, explained clearly
This notice explains what data this portfolio processes, why it is needed, how long it is kept, and the choices available to you.
Last updated: 2 October 2026
Privacy summary
Minimised analytics
Raw IP addresses are not stored with contact submissions or blog-view events.
Pseudonymous views
Blog views are keyed by a daily rotating hash, never a raw IP address.
Who is responsible
Haris Bešlić is responsible for the data processing described on this page. Questions or privacy requests can be sent toharisbeslic32@gmail.com.
Contact messages
When you use the contact form, the site stores the name, email address, and message you provide. It also records a truncated network prefix, country or region when available, browser user agent, submission time, and a random idempotency identifier. The full IP address is not stored in the application database.
This information is used to respond to your request and protect the form from spam or abuse. The legal basis, where the GDPR applies, is taking steps at your request and the legitimate interest in operating a secure contact channel. Messages are kept only as long as needed to handle the conversation, maintain relevant business records, or meet legal obligations, then deleted when no longer needed.
Blog-view analytics
When a published article is viewed, the site records the article, time, browser user agent, country or region when available, and a daily rotating HMAC derived from the IP address. The raw IP address is not saved, and the daily value is not directly reused for routine matching across days. Other limited context, such as user agent and region, may still be similar between visits. These events measure total and approximate unique views and help keep the site reliable.
The legal basis, where the GDPR applies, is the legitimate interest in understanding and maintaining the site with minimised data. Blog-view events are kept to preserve long-term article statistics; because they contain no raw IP address or account identifier, they are not used to identify individual visitors.
Security and service providers
Cloudflare Turnstile processes technical browser and network data to distinguish legitimate requests from automated abuse. Hosting providers may also process ordinary HTTP request and security logs. This site does not use that data for advertising profiles or sell personal data.
Sign-in protection.The private dashboard login processes an IP address to enforce database-backed rate limits and session security. Better Auth may store that address in rate-limit and administrator session records. Those records have time windows or expiry timestamps and are used only to protect the private dashboard, not for public-site analytics or advertising.
- Vercel— website hosting, delivery, and infrastructure logs
- Neon / Databricks— managed database hosting
- Cloudflare Turnstile— bot and abuse prevention on forms and view tracking
These providers may process data in countries outside your own. Their linked notices explain their locations and transfer safeguards.
Your choices and rights
Depending on the law that applies to you, you may ask for access, correction, deletion, restriction, or a portable copy of your personal data, or object to certain processing. You may also lodge a complaint with your competent data protection authority. There is no solely automated decision-making that produces legal or similarly significant effects.
Emailharisbeslic32@gmail.comto make a request. Enough information may be requested to confirm your identity before data is disclosed or changed.
Changes to this notice
This page will be updated when the site’s data practices change. The date at the top shows the latest revision.