This page explains what happens to your data when you visit tomherudek.com. It is a personal site — there is no company behind it, no ad network, and nothing here is sold on.
Last updated: 27 July 2026.
Who is responsible
Tom Herudek, the operator of this site. For any privacy question — including a request to see, correct, or delete your data — email herudek.tomas@gmail.com. I answer these personally.
Analytics
This site uses Google Analytics 4 to count visits and see which writing people actually read. It sets cookies in your browser and sends Google a record of the pages you view, along with your approximate location, device, and browser. IP addresses are truncated by Google before storage.
I use this only in aggregate — to know that an article got read, not to identify you. I do not run advertising, remarketing, or cross-site tracking, and I do not join this data to anything else.
If you would rather not be counted, the Google Analytics opt-out add-on blocks it across every site you visit, as does any standard tracker-blocking extension or your browser’s built-in protection.
The newsletter
If you subscribe, your email address is stored by Brevo, which sends the emails on my behalf. It is used for one thing: sending you new writing. No other mail, and the list is never shared or sold.
Every email has an unsubscribe link, and unsubscribing removes you immediately. You can also just email me and I will take you off.
Contact and enquiry forms
When you send a message through a form on this site, the name, email address, and message you type are emailed to me and stored in the site’s database so I can reply and keep track of the conversation. That is all it is used for.
Comments
If you leave a comment, WordPress stores the name, email, and comment you submit, plus your IP address and browser user-agent string, which help with spam filtering. Your name and comment are shown publicly; your email and IP are not.
Hosting and server logs
The site is hosted on Cloudways (on DigitalOcean infrastructure). As with any web server, requests are written to access logs that include your IP address, the page requested, and the time. These are ordinary operational records, kept for security and debugging, and rotated automatically.
Embedded content
Some posts embed video from YouTube, Vimeo, or Loom. Those embeds can set their own cookies and see your IP address, exactly as if you had visited the site they come from. Their privacy policies apply to that data, not mine.
How long data is kept
Newsletter subscriptions last until you unsubscribe. Form submissions and comments are kept as long as they are useful and are removed on request. Analytics data expires on Google’s own schedule. Server logs rotate within weeks.
Your rights
Under the GDPR you can ask for a copy of the data I hold about you, ask me to correct or delete it, or object to how it is used. Email herudek.tomas@gmail.com and I will action it. If you are not happy with my response, you have the right to complain to your national data protection authority.
Security
The site is served over HTTPS. If you believe you have found a security issue, the disclosure contact is published at /.well-known/security.txt.
Changes
If this policy changes in a way that matters, I will update the date at the top of this page.