Controller
tomek.st is operated by tomek.st. Phone: phone temporarily unavailable, email: hello@tomek.st, form: Contact. Polish VAT PL 6492193863. For remote billing I work with partner company Xolo Go OÜ, VAT EE102156920.
What is stored now
- The browser may keep interface choices and progress on on-page checklists so a refresh looks the same.
- When you send the contact form, the browser may attach a general note of how you arrived (referrer, first path). That is not ad tracking.
-
The form on the contact page and on services, portfolio, products,
resources, blog, docs and campaign pages sends name, email, topic, message
and page context to the server. The inquiry is kept on the server so it can
be answered. The operator is notified; the person who submitted the form
gets a short confirmation from
hello@tomek.st, without quoting the message. The server-side copy is kept for up to 12 months, then deleted. - Fonts are served from this site.
Google Analytics
The Google Analytics 4 tag is on every page. After consent, the visit record includes pages viewed, time, referrer, approximate location, and device and browser type. That information goes to Google and may be linked with ad-effectiveness measurement and ad personalisation. In the EEA this starts only after acceptance on the banner or on the Cookies page. Outside the EEA, measurement stays on until you reject it. For the EEA, the basis is consent. You can withdraw with the same banner; the footer has “Change consent”.
Name, email and the form message are not sent to Google Analytics. They stay on the server so the inquiry can be answered, and they are not joined to the Analytics visit record.
Google receives the measurement. Their description of processing: Google privacy policy and how Analytics safeguards data.
Engagement material (IR, forensics, assessment)
After scope is agreed you may transfer logs, screenshots, disk images, mailbox exports or technical notes. That is not the same as a contact-form inquiry.
- We agree the channel first (do not paste disk images or passwords into the contact form).
- Material is used only to perform the agreed scope. Access is limited to the operator handling the case; it does not go to Google Analytics.
- After the engagement ends, material is deleted or returned within the period stated in the offer / agreement — by default no longer than 90 days after case closure, unless law, an insurer or an authority requires longer retention (then that is written down explicitly).
- Working copies and transfer notes are recorded in the case file when the scope requires it (especially digital forensics).
What is not here
This site does not display ads. There are no user accounts.