Effective from 7 September 2026, last updated 31 October 2026. This document applies to Orosawa.pl. It is a translation; in case of discrepancies, the Polish version prevails.

1. Controller and contact

The controller of data related to the operation of the website is the individual running Orosawa.pl, operating under the name Orosawa.pl (the Controller). For any matter concerning personal data, write to orosawa0@gmail.com. The Controller's full identification details are provided on request to the data subject.

Providing data is voluntary. However, without an email address and the content of your message we won't be able to reply or review a submission to the Links section.

2. What data may be processed

Using the website and security

The website is hosted on Cloudflare Pages. During a connection, servers may process technical data such as IP address, date and time of the request, the requested URL, browser type, operating system, and error and security information. This is used to deliver the website, prevent abuse, diagnose problems and keep the service running.

The legal basis is the Controller's legitimate interest in running the website securely and correctly (Art. 6(1)(f) GDPR). Data is kept for the period resulting from active Cloudflare services and settings, and as long as necessary to handle an incident or claims.

Cloudflare may act as an infrastructure provider and processor. Details are in the Cloudflare privacy policy.

When you write to us, we process the data in your message, in particular your email address, name, content and any attachments. We use it only to reply, correspond with you or review your submission.

The legal basis is taking steps at your request or our legitimate interest in handling correspondence (Art. 6(1)(b) or (f) GDPR). Regular correspondence is deleted after the matter is closed, at the latest 12 months after the last message, unless the law or the need to defend against claims requires a longer period. Email is handled by Google.

The contact form on the website does not send what you type to a separate database or form service. It prepares a message and opens your email app. The data reaches us only when you send the email yourself.

Cloudflare statistics

The website may use Cloudflare Web Analytics for aggregate traffic and performance statistics. According to Cloudflare, the service does not use cookies, localStorage or fingerprinting to track visitors. It shows, among other things, page views, traffic sources, country, device and page speed. Details are in the Cloudflare Web Analytics documentation.

Google Analytics 4

Without your consent, Google Analytics runs in a limited mode: it does not store cookies or identifiers in your browser and sends Google only basic, non-identifying signals about page views (Google Consent Mode). Full statistics with cookies are enabled only after you give consent. Declining does not limit your use of the website. Analytics may process information about the pages you visit, time and manner of use, traffic source, approximate location, device, browser and identifiers stored in cookies.

The legal basis for full statistics is consent (Art. 6(1)(a) GDPR and the applicable provisions of the Polish Electronic Communications Law), and for cookieless signals the Controller's legitimate interest in basic traffic measurement (Art. 6(1)(f) GDPR). Orosawa.pl disables Google signals and ad personalization signals in its configuration. Data is kept for the retention period set in the Google Analytics property. Google may process data outside the European Economic Area under the legal mechanisms it uses. More information is in the Google privacy policy.

You can withdraw consent at any time via Privacy settings in the footer. Withdrawal does not affect the lawfulness of earlier processing.

Google Search Console

The owner uses Search Console to submit the sitemap and check indexing and visibility in Google results. Verification and indexing alone do not add a tracking tool or Google Analytics cookies to the website.

Ads and Google AdSense

The website may display ads delivered by Google Ireland Limited through Google AdSense. Google and its partners may use cookies and similar technologies to serve ads, including, with your consent, ads based on your interests, as well as to measure ad performance, limit how often ads are shown and prevent fraud.

For users in the EEA, the UK and Switzerland, consent is collected by Google's certified consent management platform compliant with the IAB TCF standard. The message lists the partners and purposes of processing. Without consent, non-personalized ads may be shown, which may still use cookies for necessary purposes such as fraud prevention. You can change your decision at any time via Privacy settings in the footer.

The legal basis is consent (Art. 6(1)(a) GDPR), and for non-personalized ads and fraud prevention, the Controller's legitimate interest in funding the website (Art. 6(1)(f) GDPR). Details: how Google uses information from partner sites and Google ad settings.

3. Cookies and browser storage

The website may use the following data in your browser:

Name or categoryPurposeDuration
nuxt-color-mode in localStorageremembering the light, dark or system themeuntil site data is cleared in the browser
orosawa-analytics-consent in localStorageremembering consent to or refusal of Google Analyticsuntil the decision is changed or site data is cleared
_ga, _ga_*Google Analytics statistics, only after consentusually up to 2 years, depending on Analytics settings
Google AdSense and ad partner cookies (e.g. __gads, __gpi, IDE)serving and measuring ads, personalization only after consent, fraud preventionusually up to 13 months
FCCDCF, FCNEC and TCF dataremembering your choice in Google's privacy messageusually up to 13 months
Cloudflare security cookies, if triggered by site protectionsecurity, bot detection and maintaining a security sessiondepending on the protection type and Cloudflare settings

LocalStorage is not a cookie, but we list it here because it stores information on the visitor's device. Settings necessary for operation and security do not require consent. Analytics cookies and personalized ads stay blocked until you consent.

4. Recipients and data transfers

Data may be received by providers necessary to run the website: Cloudflare (hosting, network and security) and Google and its advertising partners (email, Analytics and AdSense as described above). Providers process data under their own terms, data processing agreements and legally required safeguards. Data may be disclosed to public authorities only when required by law.

We do not sell user data and do not use it for automated decision-making with legal effects.

Articles and the Links section may lead to external services such as Instagram or authors' websites. Once you leave, that service's privacy rules apply. Simply displaying a regular link does not send it any data; a connection is made only when you click.

6. Your rights

To the extent provided by the GDPR, you can request access to your data, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest. You can also withdraw consent at any time.

Send your request to orosawa0@gmail.com. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or the authority in your country of residence.

7. Changes to this document

This policy may be updated when the website's features, providers or the law change. The current version is always published at this address, with the update date at the top of the page.