Privacy Policy

Last updated: 16 September 2026

This policy explains what personal data 0knu.dev ("this site") collects, why, and what rights you have over it under the EU General Data Protection Regulation (GDPR) and applicable Greek law. It's written to be read by a human, not a lawyer — if anything is unclear, email us at the address below.

1. Who is responsible for your data

This site is operated by Athanasios Christodoulou ("0knu"), an individual based in Thessaloniki, Greece. For any data protection question or request, contact:

Email: hello@0knu.dev

2. What data we collect

a) Contact form. If you use the contact form, we collect the name, email address, and message you provide. This is sent to Formspree, Inc. (a third-party form processing service — see Section 4) and to our own inbox, so we can reply to you. We don't ask for anything beyond what's needed to have that conversation.

b) Site analytics — opt-in only. On your first visit, a banner asks whether you're okay with basic, first-party analytics. If you decline or don't respond, nothing is tracked. If you accept, we log: the page you visited, the referring site (if any), your approximate location (country/city, derived from your IP address using an offline lookup — never sent to a third party for this purpose), your IP address, browser/OS type, language, screen size, and, if present, UTM campaign parameters from the link you arrived on. This is used only to understand traffic to this portfolio — never sold, never shared with advertisers, never used to build a cross-site profile of you.

c) Dashboard login. This site has a private, password-protected admin area used only by the site owner to view the analytics above and manage a client/payment log. If you are a visitor, this does not apply to you — it sets no cookie or data on your device.

3. Cookies and local storage

This site does not use tracking or advertising cookies. It uses:

• Local storage (not a cookie): to remember your analytics consent choice, so we don't ask every time you visit.
• A session cookie: only set if you (the site owner) log into the private dashboard — irrelevant to ordinary visitors.

4. Third parties we use

We keep this list short on purpose:

• Formspree, Inc. — processes contact form submissions. See Formspree's privacy policy.
• Vercel Inc. — hosts this website and its backend.
• Turso — hosts the database that stores analytics/client/payment data (only accessible via the password-protected dashboard).
• Google Fonts and unpkg.com (icon font) — deliver typefaces and icons used on this site; loading them transmits your IP address to Google/unpkg in the same way any web request does.

We do not use Google Analytics, Meta Pixel, or any advertising/retargeting script.

5. Legal basis for processing

• Contact form: Art. 6(1)(b) GDPR — necessary to take steps at your request before/in connection with a potential engagement, and Art. 6(1)(f) — our legitimate interest in responding to inquiries.
• Analytics: Art. 6(1)(a) GDPR — your explicit consent, given via the cookie banner, which you can withdraw at any time (see Section 3 and the "Cookie Settings" link in the footer).

6. How long we keep data

• Analytics records are automatically deleted after 12 months.
• Contact form messages are kept only as long as needed to handle the conversation, and are deleted or anonymized once no longer relevant, and in any case no longer than 24 months.
• Client/payment records (for people who become actual clients) are kept for as long as needed for the business relationship and any applicable tax/accounting obligations.

7. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict or object to certain processing
• Data portability — receive your data in a portable format
• Withdraw consent at any time (use the "Cookie Settings" link in the footer, or email us)
• Lodge a complaint with a supervisory authority — in Greece, the Hellenic Data Protection Authority (HDPA)

To exercise any of these rights, email hello@0knu.dev. We'll respond within one month, as required by GDPR.

8. International data transfers

Some of the processors above (e.g. Formspree, Vercel) may process data outside the EU/EEA, including in the United States. Where that happens, we rely on the processor's own GDPR safeguards (such as EU Standard Contractual Clauses), as published in their respective privacy policies.

9. Data security

This site is served entirely over HTTPS. The dashboard where analytics/client/payment data lives is password-protected, rate-limited against brute-force attempts, and access-logged. See our approach to security in general — reasonable technical measures are in place, but no online system can be guaranteed 100% secure.

10. Children's privacy

This site is not directed at children, and we do not knowingly collect data from anyone under 16.

11. Changes to this policy

We may update this policy as the site changes. The "Last updated" date at the top will always reflect the latest version.