Privacy Policy

1. Who We Are

The data controller is Ralph Desir, operating as OneDesir (KVK 97841595), based in Delft, Netherlands. For privacy questions, contact contact@onedesir.com.

2. What We Collect

We collect minimal data, and only as described below.

Contact Form

When you submit the contact form, we receive your name, email address, phone number (if provided), and message. This data is sent as an email via Resend and is not stored in any database.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in responding to business inquiries.

Rate Limiting

For spam prevention, your IP address is held in-memory during your session. It is never written to disk or persisted in any way.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in preventing abuse.

Vercel Analytics

We use Vercel Analytics to understand aggregate traffic patterns. This service is cookieless and collects only anonymized, non-personally-identifiable data.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in understanding site usage.

Vercel Speed Insights

We use Vercel Speed Insights to monitor page performance. This collects anonymized performance metrics with no cookies or personal data.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in monitoring performance.

Google Analytics (conditional)

If enabled, Google Analytics sets the following cookies:

• _ga — used to distinguish users — expires after 2 years
• _ga_<container-id> — used to persist session state — expires after 2 years

Google Analytics data is processed by Google Ireland Limited. You can opt out using browser extensions or cookie settings.

Legal basis: Article 6(1)(a) GDPR — your consent via cookie preferences.

Theme Preference

We store your light/dark mode preference in localStorage (key: site-theme). This is a functional preference stored locally on your device and is never transmitted to any server.

OSINT Dashboard

The OSINT dashboard at /osint collects zero user data. No analytics, cookies, or tracking of any kind are active on that page beyond what is described above for the site as a whole.

3. Data Transfers

Contact form submissions are processed by Resend, Inc. (United States), which participates in the EU-US Data Privacy Framework. Vercel, Inc. processes analytics data under their Data Processing Agreement. If Google Analytics is active, data is processed by Google Ireland Limited, which may transfer data to Google LLC in the United States under the EU-US Data Privacy Framework.

4. Data Retention

Contact form submissions exist only as emails in the business inbox and are subject to the email provider's standard retention. There is no separate database or data store. Vercel and Google retain analytics data according to their respective privacy policies.

5. Your Rights Under GDPR

As a data subject, you have the right to:

• Access — request a copy of any personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Portability — request your data in a machine-readable format
• Objection — object to processing of your personal data
• Restriction — request restriction of processing of your personal data
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, email contact@onedesir.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

6. Cookies Summary

7. Contact

For any privacy-related questions, concerns, or data subject requests, contact:

Ralph Desir — contact@onedesir.com