This policy explains what data this website collects, why it's collected, and what happens to it. The site is a personal portfolio for Dusko Licanin — a full-stack developer based in Banja Luka, Bosnia and Herzegovina — and the operator is Dusko Licanin, reachable at info@duskolicanin.com.
Who's responsible
Dusko Licanin, operating as a self-employed developer based in Banja Luka, Bosnia and Herzegovina. You can reach me at info@duskolicanin.com for any privacy question, data-access request, or deletion request.
What data gets collected
This portfolio is hosted on Vercel and includes server endpoints for the AI assistant and error reporting. It does not offer visitor accounts or take payments on the site.
- Contact and booking. Email links open your email app. Booking links take you to Calendly. Information you choose to send is handled by the relevant service and used to respond to your enquiry.
- AI assistant. When you send a chat message, the message and the conversation history held in the current page are sent through the site's server to Google's Gemini API to produce a reply. The chat interface keeps that conversation in page memory; it does not save it to browser local storage. This is not a promise that hosting or AI providers retain no data. Do not send passwords, payment details or confidential project material. Google's Gemini API terms describe provider processing, which depends on the service configuration.
- Optional analytics. When configured, Google Analytics and PostHog start after you choose Accept in the banner. They can process page URLs, interaction events, browser/device information and identifiers stored in cookies or browser storage. Decline keeps these optional integrations off on subsequent page loads.
- Traffic and performance measurement. Vercel Web Analytics and Speed Insights are loaded separately from that choice. Vercel describes Web Analytics as cookieless; Speed Insights measures browser performance. See Vercel Web Analytics and Speed Insights privacy information.
- Hosting and errors. Hosting services process requests to deliver the site. If the site's error boundary reports a failure, the server can log the error, page URL, browser user agent, request IP and time for troubleshooting and rate limiting.
- Browser preferences. Local storage remembers the language and analytics choice. See the Cookie Policy.
Why it's collected
- Email: to reply to project inquiries and to agree on scope. I delete or archive threads once a conversation is clearly closed.
- Analytics: to see which content performs, which browsers I need to support, and whether the site is reachable from the regions my prospects come from.
Legal basis (GDPR)
- Contact email: consent (you chose to write to me) and, if a project follows, contract performance.
- Optional analytics: the site asks for your choice before starting configured Google Analytics and PostHog integrations. Vercel traffic/performance measurement is described separately above.
Who sees your data
- Email: Google (as my Workspace provider) and — if we engage on a project — whichever shared tools we agree to (calendar, docs, invoicing). I don't sell, trade, or share your data with marketers, third-party lead networks, or data brokers.
- Website services: Vercel delivers the site and processes traffic/performance measurements; configured Google Analytics and PostHog integrations process optional analytics after acceptance. Google processes submitted AI messages through Gemini. External booking and media services process requests when used.
Data transfers
If tools I use are based outside the European Economic Area (EEA), they operate under standard contractual clauses (SCCs) as published by the European Commission, or equivalent safeguards. You can request the specific vendor list by email.
How long it's kept
- Contact email: kept for as long as the project conversation is active, and up to 2 years afterwards for potential follow-up work. Purged on request.
- Analytics: aggregate data retained up to 24 months, then deleted or fully anonymised.
Your rights
Under GDPR (and similar frameworks in the UK, California, and elsewhere), you can:
- Ask what data I hold on you.
- Ask me to correct anything inaccurate.
- Ask me to delete it ("right to be forgotten").
- Ask me to stop processing it.
- Object to processing based on legitimate interest.
- File a complaint with your local supervisory authority.
To exercise any of these, email info@duskolicanin.com — responses within 30 days.
Security
Email runs over TLS. The site is served over HTTPS only. I don't store credentials or payment data on this site. If I ever build something in the future that does, this policy gets updated before that feature ships.
Changes
Material changes to this policy will be announced here with a new "Last updated" date. Minor edits (spelling, clarifications) are made silently. If you want a change history, email me and I'll send one.
Contact
For any question about this policy, or any privacy-related request:
Dusko Licanin Banja Luka, Bosnia and Herzegovina info@duskolicanin.com