Privacy Policy

effective date: june 2026

The short version: this site sets no cookies unless you explicitly allow Google Analytics. The AI features (pointer mode and the fit check) work without cookies and without knowing who you are - what you point at or paste is processed once to generate the answer and logged only in anonymized form. No raw IP addresses are stored by this site's own backend.

1. Data controller

The responsible data controller according to the General Data Protection Regulation (GDPR) is:
Mario Simic, Vienna, Austria
Email: dev@mariosimic.at
(Personal portfolio, private and non-commercial.)

2. Hosting and server logs

This site is hosted on servers in Europe. The hosting provider automatically keeps standard web server access logs (IP address, timestamp, requested URL, user agent) for security and operational purposes. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). These logs are managed by the hosting provider and rotated according to their retention policy.

3. Google Analytics (only with your consent)

If - and only if - you click "Allow analytics" in the cookie banner, this site loads Google Analytics 4 (provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; parent: Google LLC, USA). Google Analytics sets cookies and processes usage data (pages viewed, approximate region, device type) to help me understand which parts of the site resonate. Data may be transferred to the USA; Google is certified under the EU-U.S. Data Privacy Framework. Legal basis: consent (Art. 6(1)(a) GDPR).

• If you decline, Google Analytics is never loaded - no analytics cookies are set.
• You can change your choice at any time via the "Cookies" link in the footer.
• More: Google's privacy policy.

4. The AI features (pointer mode & fit check)

This site includes two AI features: pointer mode (point at an element, get an answer) and the fit check (paste a brief, get a mapping against my work). When you use them:

• What is sent: the text of the element you pointed at (or the brief you pasted), the name of the page section, and your browser's language tag. Nothing else - no account, no cookies, no fingerprinting.
• Where it goes: my server forwards this text to OpenRouter, Inc. (USA), which routes it to the selected AI model to generate the answer. Treat it like any AI service: please don't paste confidential or sensitive personal data.
• What I keep: an anonymized usage log - a daily-rotating hash (no raw IP address is ever stored by this feature), the mode used, a short excerpt of the input, timestamps and token counts. The hash cannot be linked across days or to your identity. I delete these logs periodically.
• Rate limits: requests are limited per visitor and per day; the feature simply pauses when the daily budget is reached.

Legal basis: legitimate interest in operating the feature you actively invoke (Art. 6(1)(f) GDPR); the input you provide is sent at your initiative.

5. Live data and external content

Parts of this site fetch live data directly from external services when your browser loads the page. Your browser discloses your IP address to these services in the process:

• Google Fonts (fonts.googleapis.com / fonts.gstatic.com) - typefaces.
• microlink.io - live link previews (og:images) of my project sites.
• GitHub API - public star counts of my repositories.
• skales.app / aipointer.app - current version numbers and the public installation counter.

Legal basis: legitimate interest in displaying current, real product data (Art. 6(1)(f) GDPR). The respective providers' privacy policies apply.

6. What this site does not do

• No advertising, no ad trackers, no social media pixels.
• No cookies without consent (the cookie choice itself is stored in your browser's localStorage, which stays on your device).
• No sale or sharing of data with third parties beyond the processors named above.
• No profiling, no automated decision-making with legal effect.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. Where processing is based on consent, you may withdraw it at any time with effect for the future (footer → "Cookies"). You also have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

8. Contact

For any privacy-related questions or requests: dev@mariosimic.at - I reply fast.