the plain-language version
Privacy policy
Last updated
This site collects very little, and this page explains all of it — what the contact form does with your details, what the analytics can and can't see, and how to reach me if you ever want something corrected or deleted.
Who's responsible for this site
KovalchukSites is a sole proprietorship operated by Thomas Kovalchuk in Montréal, Québec (NEQ: [NEQ]).
Under Québec's privacy law (Law 25), the person responsible for the protection of personal information is Thomas Kovalchuk. For anything on this page — questions, requests, complaints — write to thomas@kovalchuksites.ca.
What I collect when you write to me
The forms on this site ask for your name, your business name, your email address, and — on the contact page — a message. That is the only personal information the site asks you for.
When you submit a form, those details are delivered to my inbox as an email, sent through Resend, an email delivery service. There is no account system and no database behind this site: your message exists only as that email.
I use what you send to reply to you, and for nothing else. You are not added to a mailing list, and I never sell your details or share them with anyone beyond the service providers named below.
Analytics
The site uses Vercel Analytics to count page visits. It is cookieless and anonymized: it tells me how many people viewed a page, not who they are. There are no personal identifiers, no fingerprinting, and no tracking of you across other sites. I can't identify an individual visitor from it, and I wouldn't want to.
Cookies
This site sets no cookies — not for tracking, not for advertising, not for anything. That's why you didn't have to click through a cookie banner to get here.
Spam protection and server logs
To keep the contact form from being abused, the server briefly checks the network address (IP) a submission comes from against a short-term limit on repeat submissions. That check lives in the server's memory for about ten minutes; my code never writes it to a database or a file.
Separately, Vercel — the company that hosts this site — may keep standard, short-lived server logs (IP addresses and request metadata) for security and operations, as virtually every web host does.
Who processes data on my behalf
Two service providers handle data for this site: Vercel (hosting and analytics) and Resend (delivery of form submissions as email).
Both may process data on servers outside Québec and outside Canada, mostly in the United States — Québec law requires me to tell you that plainly, so: your information may be processed outside Québec. I've chosen providers whose security and contractual safeguards are appropriate for the little this site handles.
How long I keep your information
Form submissions stay in my email inbox for as long as our conversation needs them, plus a reasonable period in case you come back. If you'd like a message deleted sooner, ask and it's gone.
Your rights
You can ask to see the personal information I hold about you, have it corrected, or have it deleted. You can also withdraw your consent to my keeping it. Email thomas@kovalchuksites.ca and I'll respond within 30 days, as Law 25 provides.
If you're not satisfied with how I handle a request, you can complain to the Commission d'accès à l'information du Québec.
If something goes wrong
If a confidentiality incident ever involves your personal information, I will assess it and — where there is a risk of serious injury — notify both you and the Commission d'accès à l'information, as Law 25 requires. Given how little this site collects, that surface is deliberately small.
Changes to this policy
Any change to this policy gets posted on this page, with the date at the top updated to match. No notification theatre — the current version is always the one you're reading.