Cookies and privacy

Last updated: 9 October 2026

This site is run by Savvas Konstantinidis, who is the data controller for it. This page covers two things: what is stored on your device when you visit, and what happens to any personal data you give me.

The short version. This site sets no cookies. It has no analytics, no advertising and no third-party code of any kind. Nothing is stored on your device, so there is nothing to consent to and no banner to dismiss.

Cookies

None are set — not by this site, and not by anyone else. You do not have to take my word for it: open your browser’s console and type document.cookie. It comes back empty.

The one exception is the chat on the contact page, and only if you start it. Pressing Start a chat loads the chat widget — from my own server, not a third party’s — and it sets a cookie so a conversation survives navigating away from the page. Until you press that button, none of it reaches your browser: there is no script on the page waiting to load, and no connection held open to the chat service. That is deliberate, and it is so that the sentence above stays true for everyone who never starts a chat.

Voting on the experiments is the other exception. Pressing an upvote sets one small cookie — a random identifier, so that the same person cannot vote twice. It is set only at the moment you vote, never before, it is not used to follow you anywhere else, and it expires after a year. Clear it and the site simply forgets you were here; nothing else changes.

No third parties

Every file needed to display a page — text, images, typefaces, styles — is served from this domain. No fonts from Google, no scripts from a CDN, no tracking pixels, no embedded media. Loading a page here does not tell any other company that you were here.

The links to my profiles on X, Instagram, LinkedIn and Discord are ordinary links. They load nothing from those platforms, and report nothing back, unless you click one.

What is processed, and why

• Server logs. Like every website, the servers that deliver this one record each request: IP address, time, the page requested, browser type. This is used to keep the site running and to deal with attacks and abuse. The legal basis is legitimate interests — the security and availability of the service. These logs are not used to build a profile of you, and not used for advertising.
• Email you send me. If you write to the address below, I receive your address and whatever you wrote, and I use them to reply. The legal basis is legitimate interests.
• The chat. If you start a conversation, I receive what you write and whatever name or email address you give me, and I use them to answer you. The widget runs on my own infrastructure rather than a third party’s. The cookie it sets is set only after you start the chat, never before. The legal basis is legitimate interests — replying to a question you asked me.
• The newsletter. If you subscribe, I use your email address to send you what you asked for and nothing else. The legal basis is consent, recorded with a double opt-in — you confirm the subscription yourself before anything is sent. Every message carries a one-click unsubscribe that takes effect immediately. Your address is never sold, rented or shared.

Retention

Logs are kept only as long as they are needed for security and fault-finding. Emails and newsletter subscriptions are kept until you ask me to delete them, or until you unsubscribe.

Your rights

Under the GDPR you may ask what personal data I hold about you; ask for a copy of it; have it corrected; have it erased; restrict or object to its processing; and receive it in a portable format. Where processing rests on consent, you may withdraw that consent at any time.

Write to sconstan@savvaskonstantinidis.gr and I will answer within one month.

Complaints

If you think I have handled your data badly, you can complain to the supervisory authority in Greece — the Hellenic Data Protection Authority, Kifisias 1-3, 115 23 Athens, www.dpa.gr — or to the authority in your own country of residence.

There is no automated decision-making and no profiling on this site.

Changes

If this policy changes, the date at the top changes with it.

The experiments list

When you ask to be let in on an experiment, the email address you give is used for exactly one thing: sending you a link to confirm it, and then a single message if that experiment opens. Until you click that link, you are not on the list at all — an unconfirmed address is a pending request, not a subscription.

The address is not sold, shared, or passed to anyone. Ask me to remove it and it is gone. The working copy lives on my own server, as does the confirmation email itself.

The newsletter is separate and opt-in. The form carries a checkbox — unticked by default, and never required — reading “Also add me to the newsletter”. Tick it and the address is also added to my Mailchimp audience, tagged by which experiment you asked about, so you get the occasional note about what I am building. Leave it unticked and you get exactly one message, when that experiment opens, and nothing else. Every newsletter email carries a one-click unsubscribe.