Privacy policy

Who I am

Liviu.dev is the website of Liviu Zachin, a freelance software developer based in Romania. For the personal data described here I am the data controller. You can reach me at contact@liviu.dev about anything in this policy.

This policy covers the website at https://liviu.dev. Work I do for clients is governed by the contract for that project.

What I collect and why

I only collect what you send me or what the site needs to work.

What	When	Why	Legal basis
Name, email, company, message, and the service, budget and timeline you pick	You send the contact or hire-me form	To reply to your enquiry and prepare a proposal	Steps you ask for before a contract, and my legitimate interest in answering you
Email address	You subscribe to the newsletter	To send you new articles	Your consent, which you can withdraw at any time
Name, organisation, job title, testimonial text and rating	You submit a testimonial	To review it and, once I approve it, show it on the site	Your consent
Payment details	You buy a mentorship plan	PayPal processes the payment; I receive a confirmation, not your card details	Performing the contract
Pages visited, device and approximate location	Only if you allow analytics	To understand which pages are useful	Your consent
Technical data such as IP address and browser	Every visit	To deliver the site, protect the forms from spam and keep it secure	Legitimate interest

I don't sell your data, I don't use it for advertising, and I don't make automated decisions about you.

Services that process data for me

These providers handle data on my behalf, only for the purposes above:

Supabase stores the messages, newsletter subscriptions and testimonials sent through the site.
Amazon Web Services (SES) sends the notification emails for those forms, from the EU (Milan) region.
Google reCAPTCHA checks that the forms are used by people, not bots. Google receives technical data about your visit when a form loads.
Google Analytics measures visits, but only after you accept analytics in the cookie banner.
PayPal handles payments for mentorship plans.
Cloudinary serves some of the images on the site.
My hosting provider keeps standard server logs.

Some of these providers may process data outside the European Economic Area. Where they do, they rely on safeguards recognised under the GDPR, such as the EU Standard Contractual Clauses.

Cookies

The site sets only a few cookies:

theme remembers whether you chose the light or dark theme.
i18n_redirected remembers your language.
cookie_consent remembers your answer in the cookie banner, for 180 days.
_ga and _ga_* are set by Google Analytics, and only if you accept analytics.

Google reCAPTCHA may also set its own cookies when a page with a form loads. You can change your analytics choice at any time with the Cookie settings link in the footer.

How long I keep it

Enquiries: I keep these while we talk and for up to two years after our last contact, unless they lead to a project. Then they are kept as long as the contract and accounting rules require.
Newsletter subscriptions: I keep these until you unsubscribe or ask me to delete them.
Testimonials: I keep these until you ask me to remove them.
Analytics data: Google Analytics keeps this for its configured retention period.

Your rights

Under the GDPR you can:

ask for a copy of your data, correct it or have it deleted
object to or restrict how I use it
take it with you, where that applies
withdraw your consent at any time

Write to contact@liviu.dev and I'll reply within one month. If you think I have mishandled your data, you can also complain to a data protection authority. In Romania that's the ANSPDCP (www.dataprotection.ro).

Changes

If this policy changes, the new version will be posted on this page with a new date at the top.