Privacy and cookies
Privacy and cookies.
How data is handled when you visit andreibutnaru.com or contact me, and what is stored in your browser.
Last updated: 8 October 2026
Who handles your data
The data controller is Andrei Butnaru, author of this personal portfolio. For privacy questions or requests about your rights, email [email protected].
This notice covers andreibutnaru.com and contacts received through it. Projects such as RecipAI and Stratum Atlas are separate websites. This portfolio shows their descriptions and images without running their features or collecting their users' data.
Browsing data and security
To open this website, your browser sends Cloudflare, the hosting and content delivery provider, your IP address and technical request data: requested page, date and time, browser information and server responses. This is needed to deliver pages, maintain the service and prevent abuse.
The legal basis is the legitimate interest in providing and protecting this website (GDPR art. 6(1)(f)). The portfolio code does not create a visitor database or record application logs. Cloudflare retains technical data according to service delivery, incident prevention and applicable legal needs, using the criteria described in its policy.
Fonts, images and project previews are hosted on this website. There are no embedded videos, interactive maps, tracking social buttons or content loaded from the project websites.
Possible Cloudflare security cookies
Cloudflare protections may set technical cookies when needed to distinguish legitimate traffic from bots or remember a successful security check. They depend on the protections in use and are not set by the portfolio code.
Cookies documented by the provider include __cf_bm for bot protection, which expires after 30 minutes of inactivity, and cf_clearance, which remembers a successful check for the period configured in the service. They are not advertising cookies. Cloudflare documents the purposes, conditions and durations of its security cookies.
Contact form and email
The form asks for your name, email address and message. "Prepare the email" creates a draft in the page's memory. It does not send it, save it in localStorage or transmit it to a backend. Editing a field cancels the prepared draft. Closing or reloading the page does not retain the draft in this website; your browser may separately manage form autofill.
If you choose "Open in Gmail", your name, email and message are passed to Google in the address of the compose page before you send anything. Choosing your mail app passes the data to the app or service you configured. You send the email by confirming it there. You can also copy my address and email me directly.
When I receive your message, I use your name, email, message and any attachments to respond, consider your request and continue the conversation. For quotes and possible collaborations, the legal basis is taking pre-contractual steps at your request (GDPR art. 6(1)(b)). For other enquiries, it is my legitimate interest in responding to contacts (art. 6(1)(f)). I do not use these details for newsletters or advertising.
Providing data is optional. Without contact details and the necessary information, I may be unable to reply. The fields are required only to prepare a draft through the form. Please avoid unnecessary health data, identity documents or other sensitive information.
I keep conversations for as long as needed to handle the request, normally no longer than 24 months after the last exchange. If a professional relationship follows, or records are needed for legal obligations or to protect a right, the relevant records follow the periods applicable to those purposes.
Providers and transfers outside the EU
Cloudflare provides hosting, delivery and website security. Google provides my Gmail mailbox and, if you choose it, the draft composition service. Providers and their subcontractors may access data needed for their services. Authorities may receive it when required by law. I do not sell your data.
These services also operate outside the European Economic Area, including in the United States. Their policies describe safeguards for transfers: adequacy decisions, including the EU-US framework for participating organisations, or standard contractual clauses and additional measures where needed. You can read the documents below or ask me about the applicable safeguards.
Links to external services
Links to LinkedIn, the App Store, Gmail, project websites and image sources open external services only when you choose them. Their own privacy policies apply from that point. They may process browsing data and use their own cookies.
AI features described for RecipAI belong to that product. This website does not send messages to AI services or carry out profiling or automated decisions that have legal or similarly significant effects on visitors.
Your rights
Where the GDPR applies, you can request access, correction, deletion and restriction of your data. You can object to processing based on legitimate interests and request portability of data processed automatically under a contract or consent. When processing is based on consent, you can withdraw it without affecting earlier lawful processing.
Email [email protected]. I will respond without undue delay, normally within one month. Complex requests may take up to two additional months; I will explain the extension within the first month. Where needed, I will ask only for information required to verify your identity.
You may complain to the Italian data protection authority or the competent authority in the country where you live or work. To remove local preferences, clear andreibutnaru.com website data in your browser settings. The light theme and initial notice will return. Blocking local storage does not prevent browsing.
Legal references and updates
This notice refers to Regulation (EU) 2016/679 (GDPR), the Italian Legislative Decree 196/2003 as amended, and the Italian data protection authority's guidelines on cookies and other tracking tools. The date above shows the latest update.
If I add services that change how data is handled, I will update this page and the notice. Any non-technical tools that require consent must remain inactive until that consent is obtained.