LET'S TALK
LEGAL — GDPR

Privacy Policy.

LAST UPDATED: MAY 2026

01. Who runs this site

This site is operated by Claudia Vaduvescu, an independent designer based in Bucharest, Romania. It exists to show my work and let people get in touch. There is no company, sales funnel, or product behind it — just my portfolio.

02. What data is collected

This site collects three kinds of data:

  • What you actively give me through forms — your name, email, optional subject, message (contact form), or just your email (newsletter).
  • Anonymized usage data — page views and performance metrics through Vercel Analytics and Speed Insights. These don't store personally-identifying info; they tell me which pages get read and how fast the site loads.
  • Settings you choose — your language preference (English / Romanian) and your reading preferences from the accessibility widget on articles (text size, color theme, dyslexia-friendly font). These stay on your device only; they're never sent to me or any server.

No location tracking, no fingerprinting, no behavioral profiling, no ad networks.

03. How the data is used

Contact-form submissions are emailed to me directly. I read them and reply to your message. Nothing is logged in a CRM or shared with anyone.

Newsletter subscribers occasionally receive design notes from me — at most a few times a month. Every email includes an unsubscribe link. Unsubscribing removes you from the audience immediately.

Anonymized analytics tell me which articles and case studies people actually read, and where the site is slow so I can fix it. I never tie this data to individual visitors.

04. Where the data is stored

Form submissions are processed and emails are sent through Resend (resend.com), a transactional email provider based in the United States. They store newsletter subscribers in their "Audiences" feature, where I can view and export the list, and unsubscribe anyone on request.

The site itself is hosted on Vercel. Vercel keeps standard server logs (IP address, request path, timestamp) for a short window for security and abuse-prevention. Vercel Analytics and Speed Insights (also operated by Vercel) collect anonymized page-view + performance data.

Your accessibility preferences and language choice live entirely in your browser's local storage and cookies. They never leave your device. If you clear your browser data, they reset.

How long inquiry emails are kept: I keep contact-form messages in my Zoho inbox for up to 24 months, then delete them — unless we've started an active project together, in which case the email thread stays for the duration of that project plus standard business-record retention. Newsletter subscriber emails stay in Resend until you unsubscribe, which removes you immediately.

05. Third-party services

The third parties that touch your data are limited to:

  • Resend — to deliver contact emails to me and to manage newsletter subscriptions.
  • Vercel — to host the website and operate the form endpoints.
  • Vercel Analytics + Speed Insights — anonymized page-view counts + performance metrics. No personal data.
  • Sanity — used to store the case studies and articles you read on this site. It does not store anything about visitors.
  • Google Search Console — verification only. I use it to see how the site appears in Google search. It does not set any cookies on visitors.
  • Figma — some case studies embed an interactive Figma file so you can pan around the actual design. When a case study with a Figma embed loads, Figma processes your IP address and sets its own cookies on the embedded iframe. Only applies to case studies where the embed is enabled — most don't use it.
  • Pinterest — case study images have a small "Save to Pinterest" button. Clicking it opens Pinterest in a new tab. I don't load Pinterest's tracking script on my site — the button is a simple outbound link, and any Pinterest cookies are set only after you arrive on their site.
  • Cloudflare Turnstile — a privacy-friendly bot check that runs invisibly on the contact and newsletter forms. When a form loads, Cloudflare sees your IP address to score the request and stop spam bots. Turnstile is designed as a no-tracking alternative to reCAPTCHA — no persistent advertising cookies, no behavioral profiling.

I do not use Google Analytics, Facebook Pixel, or any third-party advertising or behavioral tracker. I do not sell or share your data with anyone for marketing purposes — full stop.

06. Cookies and local storage

The site uses a small set of cookies and one localStorage entry. All are strictly necessary or anonymized — no advertising or behavioral cookies. Specifically:

  • locale (cookie) — stores your language preference (en or ro) when you click the language toggle. Lasts 1 year. Strictly necessary.
  • Vercel Analytics — counts page views in a privacy-respecting way. Vercel Analytics is cookieless by default; it uses your browser's sessionStorage (which clears when you close the tab) rather than persistent tracking cookies. Anonymized; no cross-site tracking.
  • Vercel Speed Insights — measures how fast pages load on real devices, so I can fix slow pages. Anonymized; no persistent tracking cookies.
  • a11y-prefs:v1 (localStorage) — saves your reading preferences when you use the accessibility widget on an article (text size, color theme, dyslexia-friendly font). Stored in your browser only; never sent anywhere. You can clear it by clicking "Reset" in the widget or by clearing your browser's site data.

Because everything used here is either strictly necessary or anonymized, no consent banner is required under GDPR or the ePrivacy Directive. You're free to block any of these in your browser settings without breaking the site — the language toggle just won't remember your choice across visits.

07. Your rights

Under GDPR, you have the right to:

  • Ask what data I hold about you.
  • Ask me to correct it.
  • Ask me to delete it.
  • Unsubscribe from the newsletter at any time.
  • File a complaint with the Romanian data protection authority (ANSPDCP).

Email me and I'll handle the request within a few working days. There is no form, no ticket system — just send a message.

08. How to contact me

For anything privacy-related, write to claudia@goodglyph.com. You can also use the contact form on this site.

This policy may change over time. The "last updated" date at the top reflects the most recent version.