This site learns almost nothing about you.

No cookies are set, nothing is stored in your browser, and no profile is built about you. Three services do see that a visit happened, and each one is described below in plain terms. This page is about the website only: notes from an actual appointment are clinical records, held under medical confidentiality, and they never pass through this site.

01 — Who is responsible

I am Darja Gostilo, dentist, practising in Rīga, Latvia. I decide what this website collects and why, which makes me the data controller for everything described on this page. There is no marketing department behind it, and no data is sold or passed on to anyone.

02 — What is not collected

This site sets no cookies and writes nothing to your browser's storage, which is why there is no cookie banner to dismiss. There are no accounts, no logins, no advertising trackers, no social media pixels and no profiling. Reading about a symptom or a treatment here records nothing about your health, because the site has no way to connect a page you read to who you are.

03 — The contact form

If you write to me through the form, it sends your name, your email address and your message, nothing else, and only when you press send. Delivery is handled by Resend, an email service acting on my behalf; the message arrives in my inbox and is stored in no database, here or anywhere else. I keep the correspondence only as long as answering you requires. You can always skip the form and email me directly instead.

Resend privacy policy

04 — Visitor statistics

I use Vercel Web Analytics and Speed Insights to see how many people visit and how quickly pages load. Both work without cookies: nothing is stored on your device and you are given no lasting identifier. To count a visit, Vercel derives a temporary hash from your IP address and browser that is rotated regularly, does not retain the IP address itself, and reports only aggregate figures: page views, countries, referrers, loading speed. I cannot identify an individual visitor from any of it. The legal basis is my legitimate interest in knowing whether the site works.

Vercel privacy policy

05 — The Instagram feed

The posts near the bottom of the page are loaded by Behold, a service that mirrors my Instagram account. Its script and the images it shows are requested from Behold's own servers, which therefore see your IP address, your browser and the page you came from, the ordinary technical footprint of loading a third-party image. Behold places no cookies and no other data on your device. The images are served from Behold's copies rather than Instagram's, so Meta is not contacted while you read the page; only if you open a post does Instagram itself receive that visit, on Meta's own terms.

Behold privacy policy

06 — Hosting

The site is hosted by Vercel, which serves every page and, like any web server, logs the requests it receives (IP address, time, page and browser) for a short period, so that the site can be delivered and defended against abuse. Vercel processes this on my behalf under a data processing agreement. The site is otherwise static: there is no database and no server keeping anything about you.

Vercel privacy policy

07 — Your rights

Under the GDPR you may ask what personal data of yours I hold, have it corrected or erased, restrict or object to how it is processed, and receive a copy. Write to me and I will answer. Because the statistics are aggregate and carry no identifier, I generally cannot locate a specific visitor within them, but anything you sent me by email or through the form I can find and delete. If you believe I have handled your data wrongly, you can complain to the Latvian Data State Inspectorate (Datu valsts inspekcija).