Privacy

This is a personal site. It has no accounts, no login, no comments, no forms, and no advertising. It sets no cookies. The only data collected is aggregate, cookieless traffic measurement.

What is collected

This site runs Vercel Web Analytics and Vercel Speed Insights. Both are cookieless and record page views and performance measurements in aggregate. They do not build a cross-site profile of you, do not store an identifier on your device, and do not track you between visits or across other websites.

As with any website, the hosting and CDN layers (Vercel and Cloudflare) process request metadata such as IP address, user agent, and requested URL in order to serve the page and to mitigate abuse. That processing is operational and short-lived; I do not receive or retain those logs as an identifiable dataset.

What is not collected

  • No cookies are set by this site, so there is no cookie banner to dismiss.
  • There are no user accounts, sign-ups, newsletters, or contact forms — there is nothing here to submit personal data to.
  • No advertising, no ad networks, no retargeting pixels, no social tracking widgets.
  • Nothing is sold, rented, or shared with data brokers. There is no data to sell.

Third parties

Vercel
Hosting, serverless functions, and the analytics described above. Acts as processor for request handling.
Cloudflare
DNS and CDN in front of the site, including transport security and abuse mitigation.
Supabase
Stores a periodic snapshot of my aggregate public GitHub contribution statistics, which the projects page reads. It contains no visitor data whatsoever.
GitHub
Queried on a schedule for those public contribution statistics. This happens server-side and is unrelated to your visit.

Outbound links to GitHub, LinkedIn, X, Telegram, Keybase, and similar services are ordinary links. Once you follow one, that service’s own privacy policy applies and this one no longer does.

Embedded and generated content

Fonts are self-hosted, so no font CDN sees your request. Social preview images and the CV PDF are generated on this domain rather than by a third-party service. Project screenshots are served from this domain or from Supabase storage.

Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction, portability, and objection. Because this site holds no personal data that can be linked to you, there is in practice nothing for me to look up, export, or delete. If you believe otherwise, write to [email protected] and I will investigate and respond.

Changes

If this policy changes materially, the change will be visible in this page’s history in the public repository that builds this site. There is no mailing list to notify, because there is no mailing list.