Privacy Policy

1. Who is responsible

CodeFromScratch is a non-commercial learning blog run by Milos Knezevic, Graz, Austria. Contact: office@codefromscratch.org.

The site has no user accounts, no payments and no advertising. It sets no cookies.

2. What data we process, why, and on what basis

• Visiting the site. Our hosting provider (Vercel) processes technical request data, such as your IP address and the page you request, to deliver the site and keep it secure. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
• Anonymous statistics. We use Vercel Web Analytics and Vercel Speed Insights to see which pages are read and how fast they load. According to Vercel, Web Analytics uses no third-party cookies and identifies a visit by a hash of the request that is discarded after 24 hours. It records the page, referrer, country, browser, operating system and device type. Speed Insights records performance measurements for a page, plus country, browser and device type. Legal basis: our legitimate interest in improving the site (Art. 6(1)(f) GDPR). Details: Vercel Web Analytics privacy and Speed Insights privacy.
• Newsletter. If you subscribe, we store your email address, a confirmation token and your subscription status. We first send one confirmation email and only add you to the list after you click the link (double opt-in). Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with the unsubscribe link in every email; unsubscribing deletes your address from our list.
• Contact form. If you write to us, we store your name, email address, subject and message so we can answer you. Legal basis: our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR), or taking steps at your request. We keep the message only as long as it is needed to handle your request.

3. Cookies and local storage

The public pages of this site set no cookies. Your browser stores your theme (light or dark) and text-size choice in its local storage; this stays on your device and is never sent to us. Only the site administrator has a login cookie, in a separate area that visitors do not use.

4. Service providers who process data for us

• Vercel: hosting, anonymous analytics and performance measurement
• Supabase: database for newsletter subscribers and contact messages
• Resend: sending the confirmation and newsletter emails
• Sanity: content management for the articles (it holds our articles, not visitor data)

Some of these providers are based in, or process data in, the United States. They describe how they protect transferred data in their own privacy documentation, which you can read on their websites.

5. Your rights

Under the GDPR you have the right to:

• access the data we hold about you
• have inaccurate data corrected and have your data erased
• restrict how we process your data and receive it in a portable format
• object to processing that rests on our legitimate interest
• withdraw a consent at any time, without affecting what happened before

To use any of these rights, email office@codefromscratch.org. You also have the right to complain to the Austrian data protection authority (Datenschutzbehörde, dsb.gv.at).

6. Security

The site is served over HTTPS and access to the database and administration area is limited to the site owner.

7. Changes

If we add a feature that processes more data, for example accounts or paid products, we will update this policy before it goes live. The date at the top shows the latest version.