This policy covers my personal sites: deeflect.com (including seen.deeflect.com), blog.deeflect.com, dee.ink, dory.deeflect.com and mies.design. They are content sites with no accounts. The controller of your data is Dmitry (Dee) Kargaev. You can reach me at hi@deeflect.com.
What I collect
- Visit statistics on every site, through the analytics tool described below.
- Your email address, only if you subscribe to the newsletter on deeflect.com or blog.deeflect.com.
- What you send me when you email me.
- Request data. Like any website, the servers that host these sites see your IP address and browser details to deliver the page.
dory.deeflect.com, dee.ink and mies.design have no forms and collect nothing beyond analytics and request data.
Analytics
I use Umami, an open-source analytics tool that I run on my own server. It does not use cookies and does not follow you across other websites.
When you load a page, Umami records:
- the page you visited and the page that sent you here (referrer)
- browser, operating system, device type and screen size
- language and approximate location (country, region, city), worked out from your IP address
- clicks on a few buttons and links, such as downloads, outbound links and newsletter signups
It does not record what you type into forms or your email address. Your IP address is used to work out location and to group visits into a session, then dropped. It is not stored. The session ID is a one-way hash that changes every month, so it can't be used to recognise you over time.
I use these numbers to see which pages people read and what works. I don't sell them, share them, or combine them with other data. The legal basis under the GDPR is my legitimate interest in understanding how the sites are used. The data is kept as long as it is useful for site statistics; it can't be used to identify you.
To opt out, block tail.deeflect.com in your browser or content blocker, or run
localStorage.setItem('umami.disabled', 1) in your browser console on the site.
Newsletter
When you subscribe, your email address goes to a small server of mine on Cloudflare, which adds it as a contact in Resend, my newsletter provider. Resend stores your address and whether you are subscribed, and sends the issues. The welcome email, and any licence keys, are sent through Cloudflare's email service. I get a short notice with your address through a messaging tool I use to hear about new subscribers.
Your IP address is used for a moment to limit how many signups one address can make per minute. I don't store it.
The welcome email has an unsubscribe link. You can unsubscribe at any time with that link or by emailing me. If you unsubscribed before and sign up again, I email you a link to confirm, so nobody else can resubscribe you. After you unsubscribe, Resend keeps your address marked as unsubscribed so you don't get emailed again. Ask me and I will delete it completely.
Some issues or signup forms offer a free beta licence for one of my apps. If you claim one, your email is sent to that app's licence server so it can issue the key, and the key is emailed to you. Unsubscribing from the newsletter revokes any licence you got through it.
The legal basis is your consent, which you can withdraw by unsubscribing.
Links to other services
The "book a call" link goes to Cal.com, and the social links go to X, Telegram, GitHub and others. These are plain links; nothing is shared with those services until you open them, and then their own privacy policies apply. Writing to me by email shares only what you choose to send. I use it to reply, and keep it as long as the conversation is useful.
mies.design shows how many times the skill has been installed. To get that number, your browser asks skills.sh, which receives your IP address.
dee.ink loads its fonts from Google Fonts, which receives your IP address.
Who processes it
- Vercel hosts all five sites and processes request data to serve them.
- Cloudflare runs the newsletter signup server and sends the welcome and licence emails.
- Resend stores newsletter contacts and sends the issues.
I may also disclose data if the law requires it.
Cookies and local storage
These sites set no cookies. The small fight game on the deeflect.com 404 page remembers whether you muted it in your browser's local storage. That setting stays on your device and is never sent to me.
Your rights
Depending on where you live (including under the GDPR, the UK GDPR and California law), you can ask to access, correct, delete or export your data, and object to or restrict how I use it. Email hi@deeflect.com from the address in question so I can verify you. I will not treat you differently for using these rights. In the EU and UK you can also complain to your data protection authority.
Children
These sites are not aimed at children. I do not knowingly collect data from anyone under 16; if you think I have, email me and I will delete it.
International transfers
Vercel, Cloudflare and Resend operate worldwide, so your data may be processed outside your country, including in the United States. Where required, these transfers rely on safeguards such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
Security
I keep what I hold to a minimum. Unsubscribe links are signed, so nobody can unsubscribe you by guessing a link.
Changes
If I change this policy, I will post the new version here with a new date.