Privacy Policy

Last updated: 2 September 2026

This policy explains what personal data huntech.dev processes, for what purpose and on what legal basis, who the processors are, and what rights data subjects have under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

1. Data controller

The data controller is Mihály Tari, a sole trader (egyéni vállalkozó; registration number 62759847; tax number 92339428-1-32) and the operator of huntech.dev. Further identifying details are in the legal notice.

• Registered office: Táncsics Mihály utca 48., 3060 Pásztó, Hungary
• Contact (data requests): contact@huntech.dev

The controller is not required to appoint a Data Protection Officer and has not appointed one.

2. Overview of processing activities

2.1. Newsletter

• Data processed: email address and the chosen language edition (Hungarian or English).
• Purpose: delivering the monthly bilingual newsletter.
• Legal basis: the data subject's consent (GDPR Art. 6(1)(a)), given by submitting the signup form.
• Processor: MailerLite (UAB "MailerLite", Lithuania, EU) — data is stored within the European Union. Some MailerLite sub-processors (e.g. CDN and monitoring providers) operate in the United States under the Standard Contractual Clauses (SCCs) adopted by the European Commission — see section 3.
• Retention: until consent is withdrawn (unsubscribe).
• Withdrawing consent: via the unsubscribe link in every email, or at contact@huntech.dev. Withdrawal does not affect the lawfulness of processing before withdrawal.

2.2. Developer and project leaderboard

• Data processed: data from public GitHub profiles — username, display name, avatar, publicly stated location, follower count, the number and per-type breakdown of public contributions over the last 90 days (commits, pull requests, code reviews, issues), programming languages used, and public repository data. Entries of Hungarian developers living abroad may additionally carry a "diaspora" badge, assigned by the operator from public profile data via a manually maintained list.
• Source of data: the public GitHub API. The data is not obtained directly from the data subject (GDPR Art. 14).
• Purpose: showcasing active Hungarian developers and Hungarian-founded open-source projects.
• Legal basis: the controller's legitimate interest (GDPR Art. 6(1)(f)) — increasing the visibility of the Hungarian developer community. Processing is limited to already-public, non-special-category data.
• Objection and removal: anyone may request removal from the leaderboard at contact@huntech.dev. On request the entry is removed, the person's data is also deleted from the non-public registry and past snapshots, and the entry is added to a blocklist so that later refreshes do not re-list it.
• Retention: the published leaderboard is refreshed weekly and always shows current public data. To operate the refresh, the controller additionally maintains a non-public technical registry (username, location, first and last seen dates) and keeps snapshots of earlier leaderboard states in internal, unpublished form.

2.3. Analytics (Umami)

• Data processed: aggregated, anonymous usage data (page views, referrer, approximate region, device type) and events (e.g. starting a newsletter signup).
• Purpose: understanding site usage and improving the content.
• Legal basis: the controller's legitimate interest (GDPR Art. 6(1)(f)).
• Tool: Umami Cloud — Umami taken as a hosted service, operated by the makers of Umami. It uses no cookies, builds no cross-person identifying profile, and does not store IP addresses. For this reason the site shows no cookie-consent banner.
• Processor: Umami Software, Inc. (registered in Delaware, United States; trading as Umami, umami.is). Processing takes place under the provider's Data Processing Addendum (umami.is/dpa), which is incorporated automatically on acceptance of its terms of service. Its servers are located in the United States and Germany — see section 3 on transfers outside the EU. Until 21 August 2026 the same measurement ran on a self-hosted Umami instance operated by the controller; data from before that date was not carried over.

2.4. Analytics (Vercel Web Analytics)

• Data processed: aggregated usage data (page views, the route viewed, referrer, approximate country, device type, browser and operating system).
• Purpose: measuring the performance and usage of the site at the hosting provider, from a second source independent of the Umami measurement.
• Legal basis: the controller's legitimate interest (GDPR Art. 6(1)(f)).
• Tool: Vercel Web Analytics. It uses no cookies and stores no identifier in the browser; to distinguish visits it derives a one-way hash from request data (IP address, user agent) using a key that rotates daily, does not store that hash, and cannot link it to the same visitor on the following day. It builds no cross-person or cross-site identifying profile. This measurement therefore does not require a cookie-consent banner either.
• Processor: Vercel Inc. (United States) — the same provider that hosts the site (see section 2.5). Processing takes place under the provider's Data Processing Addendum (vercel.com/legal/dpa). See section 3 on transfers outside the EU.
• Retention: the service retains aggregated statistics for the period allowed by the current subscription plan; no record attributable to an individual visitor is created.
• Introduced: 27 August 2026. This measurement holds no data from before that date.

2.5. Hosting and operation (Vercel)

• Data processed: server technical logs (IP address, user agent, request metadata) generated transiently for operational and security purposes.
• Purpose: serving the site, operational security, abuse prevention. The newsletter signup endpoint additionally rate-limits requests by the requester's IP address; this data exists only transiently in server memory (for at most one minute) and is not stored.
• Legal basis: the controller's legitimate interest (GDPR Art. 6(1)(f)).
• Processor: Vercel Inc. (United States) — see section 3 on transfers outside the EU.

3. Transfers to third countries

The hosting provider (Vercel Inc.) is located in the United States. Any transfer takes place under appropriate safeguards (the EU–US Data Privacy Framework, or the Standard Contractual Clauses adopted by the European Commission). The newsletter processor (MailerLite) stores data within the European Union, though some of its sub-processors (CDN, monitoring) operate in the United States under the safeguards of the Standard Contractual Clauses (SCCs). The analytics provider, Umami Software, Inc. (Delaware, United States), operates servers in the United States and Germany; transfers are covered by the safeguards in that provider's Data Processing Addendum. The second analytics measurement (Vercel Web Analytics) is run by the same Vercel Inc. that provides the hosting, under the safeguards above and that provider's Data Processing Addendum. The data transferred for these two measurements is aggregated, contains no cookie identifier, and neither provider stores IP addresses.

4. Automated decision-making

The site performs no automated decision-making or profiling within the meaning of GDPR Art. 22.

5. Children

The site is not directed at children under 16, and does not knowingly collect personal data from them.

6. Your rights

Under the GDPR you have the following rights:

• access to your processed data (Art. 15);
• rectification (Art. 16);
• erasure / "right to be forgotten" (Art. 17);
• restriction of processing (Art. 18);
• objection to processing based on legitimate interest (Art. 21);
• data portability, where applicable (Art. 20);
• withdrawal of consent (for the newsletter).

To exercise these rights, write to contact@huntech.dev. Requests are answered without undue delay, and within one month at the latest.

7. Complaints

If you believe the processing infringes your rights, you may lodge a complaint with the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9.
Phone: +36 1 391 1400
Email: ugyfelszolgalat@naih.hu
Web: naih.hu

8. Changes to this policy

This policy is updated as needed. The current version is always available on this page, with the update date shown at the top.