Privacy Policy

1. Who is responsible

David Millenov Nurak operates this website (davidmillenov.com). For any privacy questions, contact davidnurak@gmail.com.

2. What this policy covers

This website is a personal portfolio. It does not sell products, create accounts, or collect personal information through forms. The only data processing relates to website analytics and embedded third-party content, described below.

3. Analytics & cookies

We use the following services to understand how visitors use the site. Analytics scripts only load after you give consent via the cookie banner.

• Google Analytics 4 — measures page views and usage. Enabled via Google Consent Mode; IP addresses are anonymized. Cookies are only set when you accept.
• Microsoft Clarity — records anonymized session replays and heatmaps. Only loaded when you accept.
• Vercel Analytics — cookieless, aggregate usage statistics that do not identify you.
• Consent preference cookie (cookie_consent) — a strictly necessary cookie that remembers whether you accepted or rejected analytics. It does not require consent and is stored for 12 months.

4. Embedded third-party content

Some pages embed content from TikTok (e.g. a video on the Google project page). Embedded content only loads after you click to activate it, so no data is sent to TikTok until you do. Once activated, TikTok may set its own cookies and process data according to its own privacy policy.

5. Legal basis

Analytics cookies and tracking are set based on your consent under Article 6(1)(a) GDPR. The consent preference cookie is processed under Article 6(1)(f) GDPR (legitimate interest in respecting your choice). You can withdraw consent at any time.

6. Retention

The consent preference cookie is kept for 12 months. Google Analytics and Microsoft Clarity retain data according to their own retention settings (Google Analytics: up to 14 months; Clarity: up to 13 months) unless you request deletion earlier.

7. International transfers

Google Analytics, Microsoft Clarity, Vercel, and TikTok may process data in the United States. These providers rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to or withdraw consent for processing. To exercise any of these rights, contact davidnurak@gmail.com. You can also lodge a complaint with your local data protection authority.

9. Managing consent

You can change your preference at any time using the Cookie Settings link in the footer, or by clearing your browser's cookies and storage.