Privacy Policy

1. Who is responsible for your data

The data controller is Nojus Šiaulys, a freelance web developer operating as WebGenas in Lithuania.

Contact for any privacy questions: siaulysnojus@gmail.com.

2. What data I collect

I only collect what I need to run this website and respond to you:

• Contact form data — the name, email address and message you submit through the contact form.
• Technical data — your IP address, processed briefly to protect the contact form from spam and abuse (rate limiting).
• Usage data — anonymous, aggregated analytics about page visits and site performance (e.g. page views, load speed). This does not identify you.

I do not collect special-category data, and I do not ask for more information than necessary.

3. Why I use your data and the legal basis

• To respond to your enquiry and, where relevant, to take steps towards providing services to you — legal basis: your consent and/or pre-contractual steps (GDPR Art. 6(1)(a) and (b)).
• To protect the website from spam and abuse via rate limiting — legal basis: my legitimate interest in keeping the site secure (Art. 6(1)(f)).
• To understand how the site is used and improve it — legal basis: legitimate interest; the data is aggregated and anonymous (Art. 6(1)(f)).

4. Cookies and tracking

This website does not use advertising or cross-site tracking cookies. The analytics used (Vercel Analytics and Speed Insights) are cookieless and do not track you across other websites.

Your chosen language (EN/LT) is stored locally in your browser (localStorage) purely to remember your preference. It stays on your device and is not sent to me.

5. Who I share your data with

I do not sell your data. I use a small number of trusted service providers (data processors) to operate the website. They only process data on my instructions:

• Resend — delivers the email generated by the contact form. Receives the name, email and message you submit (resend.com).
• Supabase — database hosting; temporarily stores IP addresses for the rate limiter (supabase.com).
• Vercel — website hosting and anonymous analytics (vercel.com).

Some of these providers may process data outside the European Economic Area. Where that happens, appropriate safeguards (such as the EU Standard Contractual Clauses) are in place.

6. How long I keep your data

• Contact form emails — kept only as long as needed to handle your enquiry and any resulting communication or project, then deleted.
• IP rate-limiting records — deleted automatically within a short time window (about one minute).
• Analytics — aggregated and anonymous; retained according to the provider's policy.

7. Your rights

Under the GDPR you have the right to:

• access the personal data I hold about you;
• have inaccurate data corrected;
• have your data erased ('right to be forgotten');
• restrict or object to processing;
• data portability;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email me at siaulysnojus@gmail.com. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt).

8. Data security

I take reasonable technical and organisational measures to protect your data, including HTTPS encryption, input validation, rate limiting and the use of reputable processors. However, no method of transmission or storage is completely secure.

9. Children

This website and my services are not directed at children under 16, and I do not knowingly collect their personal data.

10. Changes to this policy

I may update this policy from time to time. The 'Last updated' date above shows the latest version, and significant changes will be reflected on this page.

11. Contact

Questions about this policy or your data? Email siaulysnojus@gmail.com.