Privacy
Last updated: 16 October 2026
Short version: this site has no ads, no third-party analytics, no tracking across sites and sets no cookies of its own (except a login cookie if you log in with Discord to write a review or comment). It counts page views itself, anonymously. If you comment on a blog post, your name and comment are stored and shown. A few things come from other services (GitHub, YouTube if you press play, a spam check if you write a comment, and Discord if you log in to write a review or comment). Details below.
Who runs this site
2yeet.com is run by Simon, a solo developer based in Croatia who releases his work under the name 2Yeet. For anything about your data, email simon@2yeet.com.
Hosting (Cloudflare)
The site is hosted and delivered by Cloudflare, Inc. To send you the pages and to protect the site from attacks and abuse, Cloudflare processes technical data such as your IP address, browser type, the page you requested and the time. This is needed for the site to work at all, so the legal basis is our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Cloudflare may set a short-lived, strictly necessary security cookie to tell people and bots apart. Cloudflare is a US company, so data may be processed outside the EU. See Cloudflare's privacy policy.
Page view counts and hearts
To know how many people read the site and the blog, each page view is counted. No cookies are used and no profile is built. To count each visitor only once per day, the site creates a one-way hash from your IP address and browser type, combined with a secret key. Your IP address itself is not stored, and these hashes are deleted after two days. The site also stores which other website you came from (for example google.com), but only the site's name, never the full link. View counts are shown on blog posts.
If you click the heart on a blog post, a similar one-way hash is stored so that each visitor can only add one heart per post. Clicking again removes it. Known bots are not counted. All of this is stored by Cloudflare (Cloudflare D1). Legal basis: legitimate interest in knowing how the site is used and showing honest numbers (Art. 6(1)(f) GDPR).
Blog comments
If you comment on a blog post, the name you enter, your comment and the time are stored and shown publicly under the post. Comments with swear words or links are held until I check them. A one-way hash of your IP address and browser is stored with it to limit spam (at most a few comments in ten minutes). Comments stay until I delete them; email me if you want yours removed. Legal basis: your consent by posting the comment (Art. 6(1)(a) GDPR).
To block spam bots, the comment form uses Cloudflare Turnstile. It is only loaded when you start writing a comment. Turnstile checks signals from your browser (such as your IP address) to tell people from bots, under Cloudflare's Turnstile privacy notice.
You can also comment with your Discord login instead of typing a name. Then your Discord name and picture are shown with the comment, your Discord user ID is stored with it, and there is no Turnstile check. The Discord login works the same way as for reviews, see below.
Project requests
If you send a request through the form on the hire page, your name, email address and what you wrote are stored (Cloudflare D1) so I can reply and keep track of the conversation. The form uses the same Cloudflare Turnstile spam check as the comments. I delete requests when they're no longer needed, and you can ask me to delete yours at any time. Legal basis: steps you asked for before a possible contract (Art. 6(1)(b) GDPR).
After you send a request, your browser keeps a random code for it (local storage, not a cookie), so pages on this site can show whether I've answered yet. My answer, and later messages on your project page, also reach you by email. Those emails are sent through Resend (Resend, Inc., USA), which receives your email address and the text of the email, under Resend's privacy policy.
While I'm not taking projects, the hire page lets you leave your email address to hear when I'm free again. It's stored (Cloudflare D1) together with a random code, and you first get an email (through Resend) with a link to confirm. When I'm free, everyone who confirmed gets one email, and their address is deleted right after. Addresses that are never confirmed are deleted after a week. The confirmation email also has a link to take yourself off the list. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can take back at any time.
Private project pages
If we work together, you get a private project page with its own link. The first time you open it, you enter the email the link was sent to, your name and your country, and confirm that you are 18 or older and have read how payments work. These are stored with the project (Cloudflare D1), together with our messages and milestones, because I need them to work with you and to write invoices. Your browser keeps a small key and the project name (local storage, not a cookie), so the page opens straight away next time and other pages on this site can show a link back to it. Wrong links or emails are counted with a one-way hash of your IP address and browser, to stop people guessing links. I keep project data as long as needed for the work and for invoicing, and you can ask me to delete it. Legal basis: working on our agreement (Art. 6(1)(b) GDPR).
If you pay for a milestone on your project page, the payment is handled by PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg), with your PayPal account or a card. PayPal's script is only loaded when you press Pay. I never see your card details; I store the amount, the date, the PayPal order number and the email PayPal reports for the payment, because I need them for my records and taxes. See PayPal's privacy statement. Legal basis: our agreement and my legal duty to keep records (Art. 6(1)(b) and (c) GDPR).
Files we share on your project page (builds from me, files you send me) are stored in Cloudflare R2, together with the file name, size and date. When you download a file I sent, the page notes that it was downloaded and when, so I know it arrived. Download links only work for a few minutes. Files are deleted when the project page is deleted, or earlier if you ask. Legal basis: working on our agreement (Art. 6(1)(b) GDPR).
Reviews
If you write a review on the reviews page, your rating, your review and the time are stored (Cloudflare D1) and, once I've checked it, shown publicly.
- With Discord: you log in through Discord (Discord Inc., USA) and allow the site to read your Discord name, picture and user ID, plus the date you joined the 2Yeet Discord server. Your name, picture and that date are shown on the review. The ID is stored so you can only have one review and can change it later. Nothing else from your Discord account is read or kept. The login is remembered with a cookie for 30 days (or until you press Log out), only so you can write reviews and comments without logging in again. Your picture is loaded through 2yeet.com, so other visitors never connect to Discord.
- Without login: the name you type is shown. A one-way hash of your IP address and browser is stored to limit spam, and the form uses the same Cloudflare Turnstile spam check as the comments.
- From your project page: once a project is finished you can rate it there. The name you gave on your project page is shown, marked as "Paid customer" if the project was paid through the site, otherwise "Client". Nothing else from the project is shown.
Reviews stay until I delete them; email me if you want yours removed. Legal basis: your consent by sending the review (Art. 6(1)(a) GDPR). See Discord's privacy policy.
Light and dark theme
If you use the light/dark switch in the menu, your choice ("light" or "dark") is saved in your own browser so the next page opens the same way. The currency you pick on the hire page is remembered the same way. It is never sent anywhere, and you can clear it with your browser's site data.
Fonts and images
All fonts, images and scripts are loaded from 2yeet.com itself (except the comment spam check above). The site does not use Google Fonts or any other font or image service.
GitHub star count
The number of GitHub stars shown for Anvil CSG is loaded live from GitHub when you open the page. For that, your browser contacts GitHub (GitHub, Inc., USA), which receives your IP address. No other data is sent. Legal basis: legitimate interest in showing current project information (Art. 6(1)(f) GDPR). See GitHub's privacy statement.
YouTube videos
Videos (on the Anvil CSG page and in blog posts) are not loaded until you press play. Before that, only a picture stored on this site is shown. When you press play, the video player is loaded from YouTube (Google, in privacy-enhanced mode via youtube-nocookie.com). From then on, Google receives your IP address and may store cookies or similar data, under Google's privacy policy. Legal basis: your consent by pressing play (Art. 6(1)(a) GDPR).
If you email me, I use your email address and message only to reply to you. I don't share them with anyone and delete them when they are no longer needed. Legal basis: answering your request (Art. 6(1)(b) and (f) GDPR). My email is hosted by Namecheap (Private Email) and forwarded to a Microsoft Outlook.com inbox.
Links to other sites
The site links to Discord, GitHub, GitBook and YouTube. Once you follow a link, that site's own privacy policy applies.
Your rights
Under the GDPR you can ask for access to your data, correction, deletion, restriction of processing, data portability, and you can object to processing. Just email me. You can also complain to the Croatian data protection authority, AZOP (azop.hr), or the authority in your own EU country.
Changes
If the site starts using something new (for example analytics), this page will be updated first.