Privacy Policy
How this site handles visitor data. Written in plain English, because legal boilerplate helps nobody.
Who I am
This site is run by Boglárka Paczari-Horváth (trading as "Bogi Horvath"), an AI-Augmented Process Transformation Lead based in Belgium. Contact: info@bogihorvath.com.
What I collect
The site uses three categories of tools that touch visitor data:
-
Optional analytics (Google Analytics 4 + Microsoft Clarity):
page views, referrer, device class, interaction events
(
bh_cv_download,bh_linkedin_click,bh_web_vital,bh_scroll_depth). No personally identifying information. Clarity records pseudonymous session replays with text and form fields masked by default. Optional analytics storage and Clarity activate only after you choose "Accept analytics". -
Server-side event log (
/api/log-event.php): a same-origin, consent-gated failover that stores conversion event names, plus a SHA-256 hash of your IP address. It runs only after explicit analytics consent. Event files older than 30 days are automatically removed. - Contact & booking forms: whatever you type — name, email, message. The primary route is same-origin SMTP; Web3Forms is a delivery fallback. A server-side copy is retained for delivery recovery and correspondence, and can be deleted on request. I do not add you to a mailing list.
Consent Mode
The site implements Google Consent Mode v2 with denied defaults.
Google may receive cookieless consent-mode signals, but optional analytics storage,
Microsoft Clarity, and the first-party event log wait for a clear "Accept analytics" action.
Your choice is stored in a first-party cookie
(bh_cookie_consent) for 365 days. Details of every cookie
and how to change consent are in the Cookie Policy.
Your rights (GDPR)
You can email me at info@bogihorvath.com to:
- Request a copy of any data tied to your contact form submission.
- Ask me to delete your form submission from my inbox.
- Change analytics consent at any time using "Cookie preferences" in the footer.
I respond to these under 24 hours on weekdays. For analytics data, I only hold aggregate reports — there is no user-level record on my end because GA4 stores pseudonymous IDs, not email addresses.
Third-party sub-processors
- Google — Analytics + Tag Manager. Data may transfer to the US.
- Microsoft — Clarity session analytics. Data may transfer to the US.
- Web3Forms — form relay. Data routed to my inbox and not retained by them after delivery.
- Hostinger — web hosting. Standard server logs with IP retention per their policy.
- GitHub — source control and automated build/deployment; no visitor analytics data is sent there by this site.
Changes
When this policy changes, the "Last updated" date at the top will change. Substantive changes will also be noted in the blog. No retroactive changes to data handling will be applied without a fresh banner.