Privacy Policy

Data controller

I operate this site individually and act as the sole data controller for the processing described in this policy. Direct any request concerning this policy to the contact form.

Data collected

Data you provide directly

Submitting a form transmits a name, email address, and any message or project details entered, used to respond to the inquiry.

Data collected automatically

Serving a page and handling a form submission also involve data nobody typed in. Cloudflare's edge logs record IP address, user agent, and request timestamp. The IP address of a form submission is held in memory for a few minutes to limit repeated submissions from the same address, and is passed to Cloudflare for the bot-verification check on every submission. Page views are measured by Cloudflare Web Analytics. It sets no cookie, stores nothing on your device, and builds no identifier for you: a visit is counted as a page view whose referrer is a different site. The report shows the page visited, the referring site, and coarse country, browser and device information. Query strings are never recorded.

No advertising network and no cross-site tracking script runs on this site, and nothing collected here is sold or shared for advertising.

Site assistant

When the assistant is available and you send a question, Cloudflare Workers AI processes that question, recent conversation entries and relevant website passages to generate an answer. The assistant does not ask for your contact details. Please avoid pasting personal or confidential information into it. Anything you type can be included in that processing. Cloudflare describes its treatment of these inputs and outputs in its Workers AI data-usage policy.

The assistant keeps its current conversation and a signed session token in your browser's local storage. Starting a new conversation clears that saved conversation. You can also clear it through your browser's site-data controls. I do not store conversation text on my server. I record operational metadata such as a hashed session identifier, request time, cited page identifiers, retrieval scores, token usage and whether the turn succeeded. Workers Logs on the Free plan retains logs for three days, as listed in Cloudflare's documentation.

Cloudflare Turnstile verifies a new chat session, and request limits use the visitor's IP address and session identifier. If you choose to contact me from the assistant, the form is pre-filled with your own recent messages. You can edit them before sending. The AI's answers are not included in the enquiry, and the form requires a separate verification. The form-submission practices in this policy then apply.

Processors

• Resend - contact-form email delivery. Certified under the EU-US Data Privacy Framework.
• Cloudflare - hosting, request handling, and page-view measurement. Edge logs record IP address, user agent, and request timestamp. Cloudflare Web Analytics counts page views without a cookie or a visitor identifier. Both are retained per Cloudflare's own schedule under its Data Processing Addendum.

Legal basis

• Contract performance: responding to inquiries submitted through the site.
• Consent: the bot-verification check on forms.
• Legitimate interest: maintaining security logs to operate the site and prevent abuse, and counting page views without a cookie or a visitor identifier to see which pages get read.
• Legal obligation: retention or disclosure required by applicable law.

Retention

Inquiries are retained only until resolved, then deleted. Cloudflare's edge logs and Web Analytics data are retained per its own schedule, set out in its Data Processing Addendum. The rate-limit record of a submitting IP address is held in memory only, expires within minutes, and does not survive a restart.

Your rights

Residents of the EEA, the UK, or Switzerland have the right under GDPR to access, correct, delete, or export their data, to object to or restrict its processing, and to withdraw consent at any time. Submit such a request through the contact form.

Cookies

This site sets no tracking or advertising cookies, and its page-view measurement uses none. Cloudflare Turnstile runs on every form and may set a short-lived cookie solely to distinguish human visitors from automated traffic.

Children

This site is not directed at children under 13, and data is not knowingly collected from anyone in that age group. Report any such instance through the contact form for deletion.

Policy changes

This policy will be updated to reflect changes in data practices, with the revision date above updated accordingly. Continued use of the site after a change constitutes acceptance of the update.

This policy is based on this site's actual data practices. It does not constitute legal advice and has not been reviewed by an attorney.