What this site does with your data.
Short version: unless you accept the analytics banner, nothing. No cookies, no tracking, and no request to any other company while you read it. If you do accept, Google Analytics counts your visit. You can say no, you can change your mind later, and the site works identically either way.
Before you answer the banner.
Nothing is loaded from anyone else and nothing is stored on your device. No third-party scripts, fonts, iframes or tracking pixels, and not even the Google tag itself: it is not in the page waiting to be switched on, it does not exist until you click Accept. Every file the site uses comes from this domain. Measured on this live site on 31 July 2026 with the browser's network panel open: the homepage made 15 requests and every one of them was to this domain.
If you accept.
Google Analytics 4 is loaded and two cookies are set, _ga and one beginning _ga_, which together let it tell a returning browser from a new one. They last 180 days, which is set in this site's own code rather than left at Google's two-year default. Google receives your IP address, which it truncates, plus the page, the time, your approximate region, and your browser and device type. Advertising storage and ad personalisation are switched off permanently and never asked about, because this site runs no advertising. Google acts as my processor here, the contract is with Google LLC in Mountain View, California, and the data goes to the United States. Legal basis: your consent, Art. 6(1)(a) GDPR. Google LLC is certified under the EU to US Data Privacy Framework, so the transfer rests on the European Commission's adequacy decision under Art. 45 GDPR. Google's own description of how it handles this is on its privacy page.
If you decline, or ignore it.
Nothing loads and nothing is sent. One entry goes into your browser's local storage, called nw-consent, recording the answer so you are not asked on every page. That single entry is stored whichever way you answer, and it is the only thing this site ever writes to your browser without asking, because remembering a no is what makes the no worth anything. Analytics choice in the footer of every page reopens the banner, so changing your mind costs the same one click as giving permission did.
Server logs.
Separately from all of that, and whether or not you accept, the web server records a page request the way every web server does: your IP address, the time, the page, the address of the page that linked you here, and your browser's user-agent string. It is used to keep the site running and to see whether something is broken. Requests for images, stylesheets and scripts are not logged at all. Logs rotate daily and are deleted after 14 days. They are not linked to anything else and are not shared.
The contact form.
If you send the form, four fields travel: your name, your company, your email address, and what you wrote. They are used to answer you, and for nothing else. No newsletter, no list, no third party gets them to sell you something.
- RouteThe message is passed by FormSubmit.co, a form-delivery service, and arrives in my Gmail inbox. Both are operated outside Switzerland and the European Union, so sending the form means your message leaves that area.
- If you would rather notWrite to maxguemto@gmail.com directly, or book a call. Neither goes through the form service.
- How longEnquiries stay in my mailbox while the conversation is live and for as long as I may need the context afterwards. Ask me to delete one and I will.
- Why it is allowedAnswering someone who asks to be answered: Art. 6(1)(b) GDPR where it leads to work together, Art. 6(1)(f) otherwise.
- The other recipientIf, and only if, you accepted the banner: Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, United States. That is a separate decision from the form, made by you, and reversible at any time from the footer.
Booking a call.
Every "book a call" button is a plain link to Cal.com. Nothing is embedded, so Cal.com learns nothing about you until you choose to go there. From that point their privacy terms apply, not mine, and what you enter to book the call is held by them.
Where it is hosted.
On a server at Infomaniak Network SA in Geneva, Switzerland. The site's files and its logs sit there and nowhere else.
Your rights.
You can ask what I hold about you, ask for it corrected or deleted, ask me to stop using it, and ask for a copy (Art. 15 to 21 GDPR). One email is enough and there is no form to fill in. You can also complain to a data protection authority.
Who to ask.
Max Guemto, GMTO Ateliers, Seoul. maxguemto@gmail.com. I read every message myself, so there is nobody to be escalated past.
Last changed
31 July 2026, when analytics was added and this page changed with it. Every statement here was checked against the live site and the server rather than adapted from a template, which is why it names two cookies, one recipient, one form service and one host instead of describing a category. The cookie count, the 180 day lifetime and the fifteen requests were read out of a real browser on this domain, not copied from documentation. If any of it stops being true, this page changes again.