Privacy Policy
Last updated: October 2026
reddy.world takes your privacy seriously. This policy explains what data is collected, why, and what your rights are under the General Data Protection Regulation (GDPR / AVG).
1. Data controller
The data controller for reddy.world is:
Ryan Reddy
Amsterdam, the Netherlands
reddy.world/contact
2. What we collect and why
reddy.world does not require registration or login. We do not collect your name, email address, or any directly identifying information unless you contact us voluntarily via the contact form, or pay through the support link.
Analytics (Google Analytics 4)
We use Google Analytics 4 to understand how visitors use the site — which pages are viewed, how long people stay, and which features are used. This helps improve the site.
Google Analytics collects:
- Anonymised IP address (last octet is masked; you cannot be identified from it)
- Pages visited, time on page, navigation path
- Browser type, operating system, screen resolution
- Country/city (derived from anonymised IP)
- Referral source (how you arrived at the site)
- Which works you look at or open on the home page, and whether you left your email address or booked a meeting; never what you wrote
This data is processed by Google LLC and stored on Google's servers. See Google's Privacy Policy.
Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — understanding site usage to improve a free personal portfolio.
Retention: Google Analytics data is retained for 26 months by default, after which it is automatically deleted.
Firebase (anonymous session)
reddy.world uses Firebase for backend services. An anonymous session token is created when you visit to enable site functionality (such as the contact form). This token does not identify you personally and is not linked to any account.
Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — necessary for basic site functionality.
Contact form
If you use the contact form, your message and email address, and your name, phone number and company if you choose to give them, are transmitted to Ryan Reddy. This information is used only to respond to your message and is not stored beyond that purpose or shared with third parties.
Legal basis: Consent (Article 6(1)(a) GDPR) — you voluntarily provide this information.
Support payments (Mollie)
If you support Ryan's work through the link in the footer, the payment is handled by Mollie. Mollie passes on the amount and, when your payment method makes them available, your name and account number (for iDEAL, your IBAN). They are used only for the payment and the bookkeeping. See Mollie's privacy statement.
Legal basis: Article 6(1)(b) GDPR — needed to handle the payment you make — and Article 6(1)(c) GDPR — the bookkeeping the law requires.
3. Cookies
| Category | Cookie(s) | Purpose | Duration |
|---|---|---|---|
| Analytics | _ga , _ga_* | Google Analytics — anonymised usage statistics | 2 years |
| Functional | Firebase session | Anonymous session token for site functionality | Session |
You can control cookies through your browser settings.
4. Data sharing
We do not sell your data. We do not share your data with third parties except:
- Google LLC — for analytics as described above, subject to Google's privacy policy and standard contractual clauses (SCCs) for transfers outside the EU.
- Google Firebase — for session and backend services.
- Cal.com — only if you use the booking section on the contact page: the time you pick, your name and your email are processed by Cal.com, subject to Cal.com's privacy policy.
- Mollie — only if you pay through the support link, as described above.
- Legal obligations — if required by Dutch law or a court order.
5. International transfers
Google Analytics and Firebase data may be transferred to and processed in the United States. Google LLC participates in the EU–US Data Privacy Framework and processes such transfers under standard contractual clauses approved by the European Commission.
6. Your rights under GDPR / AVG
As a person in the European Economic Area, you have the following rights:
- Right of access — you can request a copy of the personal data we hold
- Right to rectification — you can ask us to correct inaccurate data
- Right to erasure — you can ask us to delete your data
- Right to restriction — you can ask us to restrict processing in certain circumstances
- Right to object — you can object to processing based on legitimate interest
- Right to portability — you can request your data in a machine-readable format
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, write through the contact page. We will respond within 30 days.
You also have the right to lodge a complaint with the Dutch data protection authority: Autoriteit Persoonsgegevens.
7. Children
reddy.world is not directed at children under 16. We do not knowingly collect data from children.
8. Changes to this policy
We may update this policy to reflect changes in the law or data practices. The "last updated" date at the top indicates the most recent revision.
9. Contact
Privacy questions or rights requests: the contact page.