Privacy Policy

Last updated: May 2026

This privacy policy describes how this portfolio website (cech-portfolio.vercel.app, "the Site"), operated by Martin Čech ("I", "me"), collects and uses information about visitors. The Site is a personal portfolio operated from Prague, Czech Republic.

1. Information I collect

Contact form submissions

When you submit the contact form, I collect the information you provide: name, email address, optional company, project type, message, and the IP address from which the request was made. This data is used solely to respond to your inquiry.

Server logs

The Site is hosted on Vercel. Vercel automatically logs request metadata such as IP address, user agent, referrer, and timestamps for operational and security purposes. See Vercel's privacy policy.

Bot protection (reCAPTCHA)

The contact form is protected by Google reCAPTCHA v3. reCAPTCHA collects hardware and software information (e.g. device and application data) and sends it to Google for analysis. Use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.

Database (Supabase)

Project case studies and photography are stored in a Supabase Postgres database. Reading public content does not require authentication. The Site does not store visitor accounts or session data.

2. How information is used

• To respond to contact-form inquiries.
• To prevent spam and abuse via reCAPTCHA scoring.
• To investigate and mitigate security incidents.

I do not sell, rent, or share your information with third parties for marketing purposes.

3. Email delivery

Contact form messages are delivered to my inbox via Resend. Resend acts as a data processor; see Resend's privacy policy.

4. Cookies and tracking

The Site does not set first-party tracking cookies and does not run analytics. Google reCAPTCHA may set cookies necessary for its bot-detection functionality on the contact page.

5. Data retention

Contact form messages are retained in my email inbox for as long as needed to maintain a record of correspondence. Server logs are retained per Vercel's defaults.

6. Your rights (GDPR)

If you are in the European Economic Area, you have the right to access, correct, or delete personal data I hold about you, and to object to or restrict its processing. To exercise these rights, email me at martin@designsystems.cz.

7. Security

The Site enforces HTTPS, sets a strict Content-Security-Policy, and uses Subresource Integrity for third-party scripts. No system is fully secure; please do not send highly sensitive information via the contact form.

8. Changes to this policy

I may update this policy from time to time. Material changes will be posted here with an updated "Last updated" date.

9. Contact

For questions about this privacy policy, email martin@designsystems.cz.