Privacy Policy

Controller

The controller for this website is Hung Mac. You can contact me by email at [email protected].

If a full business address, tax ID, or local registration information is required for a specific client relationship, it will be provided in the contract, offer, invoice, or legal notice used for that relationship.

What data is processed

The contact form processes your name, email address, optional company or store name, project type, timeline, message, preferred language, and technical delivery data needed to send and protect the inquiry. The website does not provide a user account, checkout, newsletter signup, or payment flow.

When you visit the website, technical server logs may be processed by the hosting provider. These logs can include IP address, date and time, requested URL, referrer, browser, operating system, response status, and transferred data volume. Logs are used for security, troubleshooting, abuse prevention, and reliable delivery of the website.

When you contact me by email, WhatsApp, LinkedIn, Upwork, or another external platform, I process the information you provide, such as your name, company, contact details, message content, project context, Shopware version, task description, and files or links you choose to share.

Google Analytics and consent

This website uses Google Analytics and optional Google Ads conversion measurement only after you accept analytics and conversion cookies in the cookie banner. Google Analytics is not loaded before consent.

If you accept, Google may process usage data such as page views, approximate location, device and browser information, referrer, interaction signals, and whether a contact inquiry was completed. IP anonymization is enabled where supported.

The legal basis for analytics is consent. You can decline analytics in the banner. You can also clear your browser storage to reset the choice stored by this website.

Cookies and local storage

The website stores your analytics consent choice in localStorage under the key hungmac.analyticsConsent. This is used to remember whether you accepted or declined analytics.

Laravel uses technically necessary session and security mechanisms for form validation, CSRF protection, and reliable delivery. Analytics and conversion cookies are only used after consent.

Cloudflare Turnstile

The contact form uses Cloudflare Turnstile to distinguish legitimate inquiries from automated abuse. When the form is displayed or submitted, Cloudflare may process technical signals such as IP address, browser and device characteristics, and challenge interaction data.

The Turnstile response token is verified by this website directly with Cloudflare before an inquiry is accepted. This security processing is necessary to protect the website and contact channel from spam and abuse.

External links and platforms

The website links to external platforms such as LinkedIn, Upwork, WhatsApp, GitHub, and the Shopware Store. If you open those links, the respective provider is responsible for its own data processing.

If you contact me through an external platform, that platform may process your message, profile, metadata, and technical usage data according to its own privacy policy.

AI-assisted work

I may use AI tools to improve clarity, summarize technical context, draft reports, compare logs, or review implementation risks.

Sensitive store, order, customer, credential, or production data is not sent to AI tools without explicit approval.

Legal basis

Data is processed to operate and secure the website, respond to inquiries, prepare offers, perform contracts, comply with legal obligations, and, where applicable, based on consent.

Typical legal bases include legitimate interests in secure website operation and business communication, pre-contractual or contractual steps when you request services, legal obligations for records and invoices, and consent for analytics.

Retention

Messages and project communication are kept as long as needed to respond, manage the working relationship, document decisions, handle follow-up questions, and meet legal or accounting obligations.

Server logs are retained by the hosting provider for a limited period needed for security and operations. Analytics data retention follows the settings configured in Google Analytics.

Your rights

Depending on applicable law, you may have rights to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.

You can contact [email protected] to exercise your rights. You may also have the right to lodge a complaint with a competent data protection authority.

Changes

This privacy policy may be updated when the website, analytics setup, services, or legal requirements change. The latest version is published on this page.