Privacy Policy

Last updated: August 3, 2026

GDPR Compliant

This Privacy Policy explains what data this website collects, why, and what rights you have when visiting this site, in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679).

Data controller

The data controller for this personal portfolio website is Niko Marinović, acting as an individual managing this site. For any questions about how your data is processed, please reach out through the contact form.

What data we collect

This site collects data in two limited scenarios:

Contact form When you submit the contact form, we collect your name, email address, and message content. This data is sent via the third-party service EmailJS directly to my inbox, solely to respond to your inquiry. It is not stored on this site's server.

Local browser storage The site uses your browser's localStorage to remember: (a) your selected display theme (light/dark), and (b) whether you've dismissed the cookie notice. This data stays on your device and is never sent to our server.

Cookies & tracking

This site does not use cookies for analytics, behavioral tracking, or advertising. We don't use Google Analytics, Meta Pixel, or any other visitor-tracking tool. The only local storage used is described in Section 2, and it exists solely for essential site functionality.

Because we only use strictly necessary local storage, the cookie notice on this site only requires a single "Accept" action rather than granular opt-in/opt-out categories.

Third-party services

EmailJS Used to send messages submitted through the contact form. Data you enter passes through EmailJS servers to deliver the email. See EmailJS's privacy policy at emailjs.com.

Google Fonts This site loads fonts (Inter, JetBrains Mono) from Google's servers. When these load, your browser sends a request to Google that includes your IP address, as part of standard font delivery. See Google's privacy policy at policies.google.com/privacy.

Legal basis for processing

Data submitted through the contact form is processed based on your consent (voluntarily filling out the form) and our legitimate interest in responding to inquiries (Art. 6(1)(a) and (f) GDPR).

Data retention

Messages received via the contact form are kept in personal email correspondence for as long as necessary to handle your inquiry, or until a deletion request is made. Data in localStorage remains on your device until you clear it (via browser settings) or clear site data/cache.

Your rights

Under the GDPR, you have the right to:

Access your data

Correct your data

Erase your data

Restrict processing

Data portability

Object to processing

To exercise any of these rights, please reach out through the contact form. You also have the right to lodge a complaint with your national data protection authority if you believe your rights have been violated.

Data security

This site is static (no backend database) and served over HTTPS, ensuring data is encrypted in transit. Contact form data is not stored on the site's server — it is sent directly via the EmailJS service.

Changes to this policy

This Privacy Policy may be updated periodically to reflect changes to the site or applicable law. The date of the last revision is shown at the top of this page.

Contact

For any questions about this Privacy Policy or how your data is handled, please get in touch through the contact form on the homepage.