Legal

Privacy & cookies

Short version: I collect only what you send me through the contact form, analytics runs only if you accept it, and I never sell or share your data for marketing.

Last updated: 18 October 2026

Who is responsible

This site, cosminapalade.com, is run by Cosmina Palade, Senior Full-Stack Engineer, based in Romania. For anything about your data, write to contact@cpalade.com.

What I collect, and why

  • Contact form. Name, email, what the message is about, the optional timeline and budget, and the message itself. I use them only to reply to you and to prepare a call if we book one. Legal basis: taking steps at your request before a contract (GDPR art. 6(1)(b)) and my legitimate interest in answering enquiries (art. 6(1)(f)). How long I keep them: as long as I need them to reply to you; if we work together, for the length of that collaboration and then for as long as the law requires me to keep contract and accounting records; otherwise I delete them once they are no longer needed. You can ask me to delete them at any time at contact@cpalade.com.
  • Email. If you write to contact@cpalade.com directly, the same applies.
  • Analytics (only with your consent). Google Analytics 4 tells me which pages are visited and which actions are taken (a click on "Book a call", a sent form, a played video). It loads only after you press "Accept" in the cookie banner. Legal basis: your consent (art. 6(1)(a)), which you can withdraw at any time from "Cookie settings" in the footer.
  • Server logs. The hosting provider keeps standard access logs (IP address, time, requested page, browser) for security and to keep the site running. Legal basis: legitimate interest (art. 6(1)(f)).

Cookies

Without your consent the site sets no analytics cookies. Two small values are kept in your browser's local storage, not as cookies: your light or dark theme choice (cp-theme) and your cookie decision (cp-consent). They never leave your browser.

If you accept analytics, Google Analytics sets cookies named _ga and _ga_*, which hold a random identifier for up to 2 years and are used to tell visits apart. IP addresses are not stored by Google Analytics 4. If you change your mind and press "Decline" in "Cookie settings", analytics stops at once, on the page you are on, and the site deletes these cookies.

Who else processes data

  • Netlify (hosting and the contact form). Form submissions are stored in Netlify and forwarded to my email, and are kept there under the same rule as above. Netlify privacy policy.
  • Google (Google Analytics 4, only with your consent). Google privacy policy.
  • Calendly, if you book a call. The booking happens on Calendly's site, under Calendly's privacy notice.
  • Links to Amazon, LinkedIn and GitHub lead to those services; this site does not load anything from them.

Some of these providers process data in the United States under the EU standard contractual clauses or the EU-US Data Privacy Framework.

Your rights

Under the GDPR you can ask me to show you the data I hold about you, correct it, delete it, limit how I use it, or hand it over in a portable format, and you can object to processing based on legitimate interest. Write to contact@cpalade.com and I will answer within one month. You can also complain to the Romanian supervisory authority, ANSPDCP, or to the authority in your own country.

Changes

If this page changes, the date at the top changes with it. Nothing here limits your rights under the law.