Who handles the data
karpushyn.com is run by me, Dmytro Karpushyn, personally. There is no company behind it, so the data controller is an individual. For anything about your data write to d.push91@gmail.com and you get me, not a helpdesk.
The footer form
Sending the form posts one message into a Telegram chat. It contains: your name, your email, project details if you filled them in, the budget you picked, the services you picked, the page you sent it from, and the country code Cloudflare derives from your IP. The IP itself is never forwarded or stored.
If you attached a file, it goes to the same chat as a separate message with your name in the caption. The limit is 10 MB. Nothing is stored on this site: the file passes through the Worker and lands in that chat history with everything else.
Name and email are required, because without them there is nobody to answer. Everything else is optional.
The data goes to Telegram Messenger LLP and sits in that chat history until I delete it. Telegram runs its own policy at telegram.org/privacy.
There is no database on this site: the message is not written to any storage on the karpushyn.com side.
Analytics
Since 8 August 2026 this site uses Google Analytics 4. Before that it ran two cookie-free counters self-hosted on my own Cloudflare account; both are removed and receive nothing any more.
What GA collects from your visit: the page path and title, the referrer, any UTM tags in the address, your language and approximate location (country, region, city) from your IP, device type, browser and screen size.
Clicks are counted separately: a ui_click event carrying a name the site derives from where the link goes (contact:telegram or case:defi-tools, for instance) plus the page path. A form that reaches me is sent as generate_lead. What you typed into the form never goes to Google, only the fact that it arrived.
GA sets cookies and assigns your browser a random identifier — see the next section. That is the thing this site did not do before, and the reason this text was rewritten.
The processor is Google (Google Ireland Limited for Europe), not me. Their policy: policies.google.com/privacy. Google uses your IP to derive location and, per their documentation, does not store it in GA4 reports.
Raw events are kept for 14 months, the maximum GA4 offers for free. After that the raw events are deleted; aggregate reports are kept regardless.
There are no ads here, and Google advertising signals (Google signals, interest-based advertising) are switched off in the property.
Besides Google Analytics, the site counts page views with its own cookieless statistics running on Cloudflare. It sets no cookies and writes nothing to browser storage, and the IP address is not stored. Only aggregated data is kept (page, referrer, country and city, browser and device type), for 90 days.
Cookies and local storage
cc — the two-letter country code Cloudflare reads from your IP, lasting a day. One thing on the site reads it: the clock in the header, so it can show the time in the 12 or 24-hour format your country expects. It is not HttpOnly, because the page script is its only reader. No identifier.
_ga and _ga_XXXXXXXXXX — set by Google Analytics, lasting 2 years. They hold a random browser identifier GA uses to recognise you as the same visitor across visits. It is not your name or your email, but it is an identifier and it deserves to be named as one.
There is deliberately no consent banner: this is a personal portfolio rather than a business, and asking permission for a visit counter seems to me like ceremony. If you would rather not be counted, any ad blocker removes GA entirely and the site works exactly the same without it. Safari blocks GA tracking on its own, no blocker needed.
Local storage keeps your chosen interface language. It never leaves your browser.
What I do NOT do
I do not sell your data or pass it to anyone beyond Telegram, Cloudflare and Google, all named above. No advertising, and no Google advertising signals. No profiling and no automated decisions about you. Nothing links what you wrote in the form to what analytics shows: they are two separate systems with no shared key.
Your rights
You can ask for a copy of your data, a correction, or deletion. Write to d.push91@gmail.com and I will do it by hand. Since everything lives in one chat, deletion is literally deleting a message.