privacy.md

• guestbook: the name/handle and message you type, plus a timestamp. shown publicly on the guestbook page. don't post personal info you don't want public, i can't unsee it and neither can anyone else. stored until you ask me to remove it, or i remove it for being spam.
• contact form: your name, the contact handle you give me, and your message. not public. i only use it to reply to your message. deleted once i no longer need it to respond to you.
• visit counter: a single anonymous number. no record of who visited.

• no cookies, no analytics, no ads, no fingerprinting.
• the site itself does not write your IP to its own database. server software may temporarily log IPs as part of normal operation and basic security.
• the visit counter uses sessionStorage in your own browser to avoid counting you twice. no personal data, never leaves your browser.
• submitting the contact form sends a notification to my discord via webhook, so i see it faster. discord is the only third party involved, and only for that.

under GDPR (RODO if you're Polish like me) you can ask what data of yours i have, ask me to fix it, ask me to delete it, or complain to your country's data protection authority (in Poland, UODO) if you think i've messed this up. for a site this small the easy version is: message me and tell me which guestbook entry or contact message is yours, and it's gone.

legal basis: guestbook posts are stored because you chose to publicly post them. contact messages are processed because it's necessary to actually reply to you.