--- title: "Privacy policy" url: "https://romankryvolapov.com/en/privacy/" description: "What romankryvolapov.com collects and why — Cloudflare hosting, analytics only with consent, the contact form, and the MCP server and WebMCP tools for AI assistants." language: en updated: 2026-11-11 --- This page explains what happens to your data when you read romankryvolapov.com, write to me, or use the site through an AI assistant. The short version: the site has no accounts, no advertising and no data sales; analytics works only if you allow it; messages you send come straight to my mailbox. ## Who is responsible The site is run by me, Roman Kryvolapov, as a private person. Questions about this policy and requests about your data go through the [contact form](/en/contact/), [Telegram](https://t.me/RomanKryvolapov) or [LinkedIn](https://www.linkedin.com/in/roman-kryvolapov/). ## Reading the site The site is a set of static pages served by Cloudflare. To deliver a page and protect the site from attacks, Cloudflare processes the technical data of each request: your IP address, your browser and the address requested. I see only aggregated numbers, such as how many requests came in a day. How Cloudflare handles this data is described in its [privacy policy](https://www.cloudflare.com/privacypolicy/). Some things are stored in your own browser and never leave it: the colour theme you chose, the state of the table of contents and your answer to the analytics question. Site search runs in the browser too: what you type is not sent anywhere. ## Analytics The site uses Google Analytics 4 to see which articles get read. It starts only after you press "Accept" in the bar at the bottom of the page; until then the page makes no request to Google and sets no cookies. If you press "Decline", the choice is remembered in your browser and the counter never starts. With your consent, Google Analytics sets its cookies and records the pages you open, where you came from, your approximate location, your device and your browser. I see aggregated reports, not individual people. According to Google, Google Analytics 4 does not store IP addresses. The data is kept under Google's retention settings and its [privacy policy](https://policies.google.com/privacy). To change your answer, delete this site's data in your browser settings: the bar will ask again. ## Writing to me The [contact form](/en/contact/) sends your name, email address and message to my mailbox by email, through Cloudflare's email service. The site itself stores nothing. The form is protected by Cloudflare Turnstile, a check that the message is sent by a person; most visitors never see it. The form's server log records only whether the email went out and error codes, without your name, address or text. The message stays in my mailbox (Gmail, by Google) for as long as we correspond; ask me and I will delete it. I use your address only to reply to you. ## AI assistants: the MCP server and WebMCP AI assistants such as ChatGPT or Claude can use the site through its MCP server at mcp.romankryvolapov.com and through WebMCP tools that the pages themselves register in the browser. - **Searching and reading articles.** The server receives the search query or the article address, finds the answer in memory and returns it. Queries are neither stored nor logged. As with the site, Cloudflare processes the technical data of each request. - **Writing to me.** The `send_message` tool delivers a message the same way as the contact form. To limit spam, the server counts messages per day; for that it keeps a one-way fingerprint (a hash) of the sender's email address and network address for two days — never the addresses themselves. - **WebMCP tools** run in your own browser tab; the message tool fills in the visible contact form and sends it the same way as the button does. The conversation with the assistant itself is processed by the assistant's developer under its own privacy policy. The site receives only what the assistant passes to a tool. ## What the site does not do There are no user accounts, no advertising, no selling or sharing of data and no tracking on other sites. The site does not use anything you send to train AI models. ## Your rights You can ask what I have about you, ask me to correct or delete it, and withdraw your consent to analytics at any time. If you live in the EU, you also have the right to complain to your data protection authority. ## Links to other sites Links to Telegram, LinkedIn, Medium, Buy Me a Coffee and other sites lead outside; their own privacy policies apply there. ## Changes If the site starts handling data differently, this page will change with it. This version is dated 11 November 2026.