Privacy
Last updated 6 November 2026
This is a personal portfolio. It sets no cookies, loads nothing from other companies, and shows no advertising. What follows is the complete list of what it records.
What is recorded when you visit
Each page view is stored as a single row: the page, the site you came from, an approximate location (country, region, city) derived from your IP address, your device type, browser, operating system, screen size, browser language and time zone, how long the page stayed open, and how far you scrolled.
Your IP address is not stored
It is used for two things in the moment the request arrives — to work out the approximate city, and to build a pseudonymous identifier — and is then discarded. The identifier is a SHA-256 hash of the IP address, the browser string, the date and a secret key. It cannot be reversed, and because the date is part of it, it changes every day. Nobody, including the site owner, can connect two visits on different days to the same person.
Opening the CV
Opening the CV is counted, with the same approximate location and device details, plus the ?ref= tag of the link it was opened from if there was one.
Shared links
A link may carry a tag such as /?ref=company-name. It records which shared link was opened. It identifies the link, not you.
Storage in your browser
Your chosen language and colour theme are saved in your browser’s local storage so the site remembers them. They never leave your device. No cookies are set.
Do Not Track
If your browser sends a Do Not Track signal, nothing at all is recorded.
Who else sees it
The site runs on Vercel and its data is stored with Neon, both acting as processors. Nothing is sold, shared or sent to advertisers, and there are no analytics companies involved.
How long it is kept
Visit records are deleted automatically after 180 days.
Security
Failed admin login attempts are counted against a salted hash of the address they came from, so that repeated guessing can be stopped. That record is deleted on a successful sign-in and expires by itself.
Legal basis and your rights
The basis is legitimate interest (Art. 6(1)(f) GDPR) in understanding whether the site works and is read. You can ask what is held about you, ask for it to be deleted, or object to it entirely — write to the email address on the contact section, and it will be done.