Privacy
Privacy policy
1. Who is responsible
This website (tudorcretu.ro) is operated by Tudor Crețu, acting as the data controller.
- Contact: tudor@tudorcretu.ro
- Hosting: Hostico SRL (Romania), with Cloudflare, Inc. providing CDN and security in front of the site.
2. What data is collected
This is a static personal website. There are no accounts, no logins, no stored forms, no shop. The only data processing is website analytics through Google Analytics 4 (GA4), and only after you give consent. When enabled, GA4 collects:
- which pages you visit and time spent
- approximate location (country / city level, from a truncated IP — your full IP is not stored)
- device, browser and operating system type
- the site or source that referred you here
This is aggregated and statistical. I use it only to understand traffic at a personal level. I cannot identify you from it.
3. Cookies
If, and only if, you accept analytics, GA4 sets cookies in your browser:
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Distinguishes unique visitors | up to 2 years |
_ga_* | Maintains session state | up to 2 years |
Until you click Accept, no analytics cookies are set and GA4 is not loaded.
Your theme preference (light/dark) is stored in your browser's localStorage only,
never sent to me, and is not used for tracking.
4. Legal basis
Analytics runs on your consent (Art. 6(1)(a) GDPR), given via the cookie banner. You can withdraw it at any time (see section 7).
5. Third parties and international transfers
- Google (GA4) — provided by Google Ireland Ltd.; data may be processed by Google LLC in the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses.
- Cloudflare — processes connection metadata (IP, request data) to deliver and secure the site. This is technically necessary to serve the page.
- Google Fonts — some web fonts load from Google's servers, which exposes your IP address to Google at the moment fonts load.
I share data with no one else. No advertising, no remarketing, no social trackers.
6. How long data is kept
GA4 event-level data retention is set to 14 months, after which it is deleted automatically. Aggregated reports may be kept longer.
7. Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction, objection, data portability, and to withdraw consent at any time.
- To withdraw analytics consent: , or clear this site's cookies in your browser.
- To exercise any right or ask a question: tudor@tudorcretu.ro.
You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP, dataprotection.ro).
8. Changes
I may update this page. The "last updated" date at the top reflects the latest version.
← Back to tudorcretu.ro