1. Overview
I believe in a web that respects user privacy. This website is built to collect aggregate metrics without invasive tracking. There are no cookies stored on your device, and no personal data is persistently tracked or sold.
2. Web Analytics (Umami)
I use Umami Analytics to collect anonymous, aggregate website statistics. Umami helps me understand general traffic levels, popular blog posts, and referrer links (e.g., if you found my page through LinkedIn or GitHub) without identifying individual users.
- No cookies are written to or read from your browser.
- No browser fingerprinting is performed.
- No personal identification data is stored.
- IP addresses are briefly resolved for general country/city metadata and immediately anonymized/discarded.
3. Technical Operations & Network Metadata
When you access this website, standard network connection details (including your IP address, browser User-Agent, and requested resource) are temporarily processed to facilitate security, routing, and generic traffic analysis.
- To ensure security, prevent abuse, and analyze bot/crawler traffic, CloudFront server access logs are collected at the edge layer. These logs contain connection details (IP address, requested page, and User-Agent) and are configured to automatically expire and delete after 90 days.
- No cookies, tracking pixels, or local storage identifiers are written to or read from your browser for this purpose.
- This temporary log retention and processing is performed for the legitimate purpose of securing our infrastructure, preventing abuse, and analyzing general website usage.
4. Visitor Analytics & Interaction Events
The site owner has a private, access-controlled dashboard that summarizes the server logs above together with basic interaction events. This is done on the basis of legitimate interest (understanding who uses the site, securing it, and responding to inquiries).
- The dashboard is accessible only to the site owner, behind multi-factor authentication.
- Your IP address is resolved to an approximate location (country/city) and network operator (e.g., an organization or ISP) using a GeoIP database stored in the site's own cloud account. Your IP address is not sent to a third party for this purpose.
- Summaries show only a shortened IP address (the last part is removed) and a visitor identifier derived from your IP address and browser details with a secret that changes daily. It cannot be used to recognize you across days.
- When you click a link or button on this site, the click (the destination or button label and the page it happened on) is recorded together with that daily identifier. Text you type into forms is never recorded.
- Interaction events and summaries are automatically deleted after 90 days.
- You may object to this processing by contacting me, using the details below.
5. Infrastructure & Third-Party Processors
In-memory network metadata lookups are processed in real-time using secure, HTTPS-only APIs (such as ipapi.co or ipinfo.io). These services act strictly as data processors to resolve network details and do not store, track, or share your IP address.
6. Contact
If you have any questions about this privacy approach, feel free to contact me via LinkedIn or email.