← Back to Home

Privacy & Legal

Effective Date: 2026-02-10

Last Updated: 2026-02-10

Overview

This is a personal portfolio website. I respect your privacy and am transparent about what data is collected and how it's used.

What Data is Collected

Analytics (When Enabled):

When configured by the site owner, this site uses Google Analytics 4 via server-side Measurement Protocol to understand how visitors interact with the portfolio. Google Signals is enabled in those cases, which means:

  • Page views & behavior - Which pages are visited, time on site, referral sources
  • Location data - Country/region (not precise GPS location)
  • Device & browser - Device type, operating system, browser version
  • Google Signals data - If you're signed into a Google account, GA may:
  • Associate your visit across multiple devices (cross-device tracking)
  • Use your Google profile data for enhanced demographics and interests reporting
  • Share anonymized data with Google for ads personalization (even though this site doesn't run ads)
  • Link your activity to Google's advertising ecosystem

Technical Data:

  • Server logs - IP address, browser type, access times (standard web server logs)
  • Cloudflare data - CDN and security services may process request metadata

What is NOT Collected Directly

  • ❌ No personal information collected by me (name, email, phone)
  • ❌ No user accounts or authentication on this site
  • ❌ No first-party cookies set by this site
  • ❌ No selling of your data to advertisers

Important: While I don't collect personal data, if analytics is enabled, Google Analytics with Google Signals MAY associate your visit with your Google account if you're signed in, which could include your name, email, and other Google profile information.

How Data is Used

  • Understanding which content resonates with visitors
  • Improving site performance and user experience
  • Monitoring for security issues

Third-Party Services

Google Analytics 4 (with Google Signals - When Enabled):

When the site owner has configured analytics:

Hetzner Online GmbH (Hosting):

  • VPS hosting infrastructure located in Germany/Finland (EU)
  • Server logs may contain IP addresses and request metadata
  • Subject to Hetzner's Privacy Policy
  • GDPR-compliant EU data center

Cloudflare:

  • CDN, DDoS protection, DNS, and Web Application Firewall
  • May process request metadata, IP addresses, and security cookies
  • Subject to Cloudflare's Privacy Policy

Your Rights

Access & Transparency: This is an open-source project. You can review the source code on GitHub to verify privacy practices.

Opt-Out of Analytics (When Enabled):

If analytics is configured on this site:

  • Block all tracking: Use browser extensions like uBlock Origin, Privacy Badger, or browser built-in tracking protection
  • Opt-out of Google Analytics only: Install the Google Analytics Opt-out Add-on
  • Opt-out of Google Signals/Ads: Visit Google Ads Settings and turn off "Ads Personalization"
  • View/Delete Google Activity: Manage your data at myactivity.google.com

Data Deletion: Since this is a portfolio site with no user accounts, there's no personal data stored by me to delete. If analytics is enabled, Google Analytics retains data according to their retention policies. You can request deletion via Google's Data Deletion Request.

Contact: Questions or concerns? Email me at [email protected]

Data Retention

  • If analytics is enabled: Analytics data is retained according to Google Analytics 4 defaults (2-14 months)
  • Server logs are rotated automatically and not retained long-term

International Data Transfers & GDPR

This site is hosted on Hetzner servers in Germany/Finland (EU jurisdiction), but data is processed by third parties globally:

  • Hetzner (Primary Hosting): Germany/Finland (EU) - GDPR compliant
  • Cloudflare: Global edge network (US company with EU data centers)
  • Google Analytics: United States (US company under EU-U.S. Data Privacy Framework)

For EU/EEA Visitors:

  • Your data is transferred to the United States (Google Analytics)
  • Google complies with the EU-U.S. Data Privacy Framework
  • You have rights under GDPR to access, rectify, and erase your data
  • You can lodge a complaint with your local Data Protection Authority
  • Legal basis for processing: Legitimate interest (understanding website usage) and consent (via continued use)

By using this website, you acknowledge and consent to these international data transfers.

Changes to This Policy

I may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.

GDPR Compliance (EU/EEA Visitors)

Legal Basis: Legitimate interest (Article 6(1)(f) GDPR) - understanding website performance and visitor behavior.

Your Rights Under GDPR:

  • Right to Access (Art. 15): Request what data Google Analytics has collected about you
  • Right to Rectification (Art. 16): Correct inaccurate data
  • Right to Erasure (Art. 17): Request deletion via Google's data deletion tools
  • Right to Restriction (Art. 18): Limit processing by opting out
  • Right to Object (Art. 21): Object to analytics processing at any time
  • Right to Data Portability (Art. 20): Export your Google Analytics data
  • Right to Withdraw Consent: Opt-out anytime via Google Ads Settings

Data Protection Officer: As a personal portfolio, I don't have a DPO. Contact me directly at [email protected] for privacy inquiries.

Supervisory Authority: You have the right to lodge a complaint with your local Data Protection Authority if you believe your data protection rights have been violated.

Children's Privacy

This site is not directed at children under 13. I do not knowingly collect data from children.

Questions or concerns? Email me at [email protected]

This site is open source. View the source code on GitHub