Information
The contact form uses the name, email address and message that you choose to enter. Your phone number and social profile link are optional and are used only to get in touch. These details are not intended for newsletters or advertising. Do not include passwords, credentials or other sensitive information.
Updated 19 September 2026
The message is delivered by Resend. To limit abuse, the server also temporarily processes a one-way, randomly keyed fingerprint of the network address; it does not store the address itself in this record and removes the record after the limit expires. The same request rate is watched by the Cloudflare hosting itself, which uses your network address as a counter; its answer is a yes or a no, and none of it is stored. Your browser may additionally send the site a report about a content security policy violation. The server writes one shortened line to its operational log from it, saying what was blocked and on which page, and stores nothing.
The data controller is Lukáš Granatier, a private individual, email lukas@granatier.cz. The site is not operated as part of a business, so no registered address or company number is given here; if that changes, they will be added.
Details from the form are used only to answer your message and to discuss possible work together. The lawful basis is Article 6(1)(b) GDPR, steps taken at your request before entering into a contract; where no contract is involved, Article 6(1)(f), my legitimate interest in replying to someone who contacts me. The one-way fingerprint of your network address is processed under Article 6(1)(f) to protect the form against abuse. The same basis covers the aggregate measurement of visits: I need to know which pages people read and how quickly those pages load, and I do it without cookies and without identifying anyone.
Using the form is voluntary and is not a condition of any contract. Without a name, an email address and the text of your message, however, I cannot reply.
The message is delivered by the email service Resend acting as a processor, and the site is hosted by Cloudflare. Cloudflare also measures visits for me through Cloudflare Web Analytics. All I see is the total: which page someone opened, where they came from, the kind of device and browser, the country, and how fast the page loaded. It stores no cookie, hands out no visitor identifier, and I cannot tell individual people apart in it. Your details are never sold, passed on for marketing or used for profiling.
Resend and Cloudflare are both United States companies and may process data there; Cloudflare runs a global network and states that most data stays on its edge servers while metadata is processed in its data centres in the United States and Europe. Each relies on the European Commission's Standard Contractual Clauses for the transfer (Module Two, for the controller-to-processor relationship) together with certification under the EU-U.S. Data Privacy Framework; verified on 19 September 2026 at resend.com/legal/dpa, cloudflare.com/cloudflare-customer-dpa (version 6.4, effective 3 April 2026) and cloudflare.com/trust-hub/gdpr. The processing terms of both companies form part of their service agreements and become binding when those are accepted, with no separate signature required; verified on 19 September 2026.
Your message and the email exchange that follows are kept for 24 months after the last reply and then deleted. The abuse-protection fingerprint of your network address expires within ten minutes and the address itself is never stored.
You have the right of access to your data, to rectification or erasure, to restriction of processing, to data portability, and to object to processing based on legitimate interest. An email to lukas@granatier.cz is enough. You may also lodge a complaint with the Czech Office for Personal Data Protection.
This information describes the site as it stands on the date above. If optional tracking is ever added here, it must not run without prior consent.