In force since 11 August 2026
AnimArchive is a personal portfolio site. It sells nothing and shows no advertising. I do count visits and track plays, but in a way that cannot identify anyone — no cookies, no profiling, no advertising tools. Beyond that I collect only the data needed to handle a comment or a message from you. This page explains exactly what happens to it.
Who is responsible for your data
The data controller is Paweł Dusza, author and owner of animarchive.com. For anything related to privacy, write to [email protected] — I answer personally.
Comments
To leave a comment you provide a name or nickname and an e-mail address. The comment text, the date, your IP address and browser details are stored as well — the last two solely to protect the site against spam and abuse.
- Your e-mail address is never published or shared with anyone. I need it to be able to reply and to tell commenters apart.
- Everyone’s first comment waits for my approval. Later ones appear immediately.
- No account is required — the site has no user registration.
- The legal basis is my legitimate interest (Art. 6(1)(f) GDPR): hosting discussion under my work and protecting the site from spam.
- Comments are kept for as long as the site exists. You can ask me to delete yours at any time — one e-mail is enough.
Avatars. Comments display an avatar from the Gravatar service. To fetch it, a hashed version of your e-mail address is sent to Gravatar — the address itself is never sent in readable form. The service is operated by Automattic Inc., based in the USA.
Contact form
The form on the Contact page and next to the CompNotes program asks for your name, e-mail address and message. This goes to my mailbox only — it is not stored in the site database and never used for any newsletter.
The legal basis is taking steps at your request and my legitimate interest in corresponding with you (Art. 6(1)(b) and (f) GDPR). Messages stay in my mailbox for as long as the matter they concern may require.
Notifications about new program versions
On the program page you can leave your e-mail address so that I can write when a new version appears. That is the only reason the address will ever be used — there is no newsletter here, no advertising and no other correspondence.
- Signing up requires confirmation. After entering your address you receive a message with a link — until you click it the address stays inactive and nothing will be sent to it. This prevents anyone from being signed up against their will.
- I store the date and IP address of the moment you signed up. Solely to be able to demonstrate that consent was actually given (Art. 7(1) GDPR). This is the only place on the site where an IP address is kept.
- You can opt out at any time. Every message carries an unsubscribe link that works without logging in and without asking why. Clicking it deletes your address from the database entirely — no trace is left.
- The legal basis is your consent (Art. 6(1)(a) GDPR). You may withdraw it at any time, which does not affect the lawfulness of what happened before.
- Addresses stay on my own server and are shared with no one. Should I ever use an external mailing service, I will add that information here before it happens.
Visit and play statistics
I want to know how many people drop by and what they listen to, so I count page views, track plays and clicks on downloadable files. Two tools do this — neither of them sets cookies, which is why the site shows no consent banner.
- Site traffic is measured by Cloudflare Web Analytics. It stores no cookies and builds no visitor identifier. It tells me the number of views, the country, the type of device and the address of the page you came from.
- Plays and downloads are counted by a simple counter on my own server. It records only the date, the name of the track or file, and whether it was started or listened to the end. No IP address is stored, nor anything that could tie a play to a particular person — the result is plain aggregate numbers such as “this track was started 86 times”.
The legal basis is my legitimate interest (Art. 6(1)(f) GDPR): knowing which material gets watched and listened to. I do not combine this data with comments or correspondence.
Server logs
The server keeps standard access logs: IP address, date and time, the page requested and the browser type. They serve only troubleshooting and security (Art. 6(1)(f) GDPR). I do not combine them with other data and do not use them to profile visitors.
A backup of the site and database is made daily. Backups older than 14 days are deleted automatically.
Who receives the data
I do not sell or share data with anyone for marketing purposes. I do rely on services without which the site could not run:
- Hetzner Online GmbH (Germany) — the server hosting the site.
- Cloudflare, Inc. — protection and acceleration, plus visit statistics (cookie-free); all traffic passes through it, so it processes visitors’ IP addresses.
- Google Ireland Limited — the mailbox receiving contact form messages.
- Automattic Inc. — Gravatar avatars next to comments.
- Google Ireland Limited (YouTube) — videos in the Video section load directly from YouTube.
Some of these companies are based outside the European Economic Area. Such transfers rely on the standard contractual clauses approved by the European Commission.
Cookies
The site uses no advertising or analytics cookies. Only three kinds are in play:
- Remembering commenter details — set only if you tick the box below the comment form yourself, so you need not retype your name and e-mail next time. Valid for one year.
- Cloudflare technical cookie (
__cf_bm) — tells humans from bots, expires after roughly 30 minutes. - YouTube cookies — appear only once you start playing a video in the Video section. Google sets them under its own terms.
Neither the visit statistics nor the play counter use cookies — that is why the site shows no consent prompt.
You can delete or block cookies in your browser settings at any time. The site will keep working.
Your rights
You have the right to access your data, to rectify, erase or restrict its processing, to object to processing, and to data portability. I use no profiling and no automated decision-making.
To exercise these rights, write to [email protected]. I reply as quickly as I can — within one month at the latest.
If you believe I process your data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warsaw) or with the supervisory authority in your own country.
Changes
When the site gains features that affect data, I will update this document and change the date at the top. Earlier versions are available on request.