Privacy

When you open a page

• From your browser's request:your IP address; the approximate location that Vercel, which hosts the site, works out from it (country, region, city, postal code, coordinates and time zone); and your browser's user agent, which names the browser, operating system and device.
• From the page: which page and its title, the page that linked you here, any campaign tags in the link (utm_…), your screen and window size and pixel density, languages, time zone, light or dark mode, reduced-motion setting, connection type where the browser reports it, and on Chrome-based browsers the operating-system version and device model.
• While you read: how long the page was visible, how far you scrolled, which sections you looked at, clicks on the CV, email links, project pages, links to other sites and the copy-email button, and whether you sent a message.

Opening the CV or a project page directly, and link previews (someone pasting this site's address into LinkedIn, Slack, WhatsApp and the like), are logged from the request alone: IP address, approximate location, user agent, the referring page and your languages. Search engines and other crawlers are logged the same way.

What that says about you

• No cookies, and nothing is stored in your browser unless you ask not to be logged (below). Visits are grouped by an ID made from a salted hash of your IP address and user agent, so the same browser on the same network counts as one visitor. The IP address itself is stored too.
• To see which organisation a network belongs to, your IP address is sent to rdap.org and on to the regional internet registry that assigned it (ARIN, RIPE, APNIC and the like), and a reverse-DNS lookup is made. The answer (who owns the network, and a best guess at whether that is a company, a university, an internet provider or a cloud host) is saved with the visit. The lookup itself is cached for 30 days, so the same address is not looked up again.
• None of this gives me your name. The only way I learn who you are is if you tell me in a message.

When you send a message

I keep your name, email address and message, with the IP address, approximate location and browser it was sent from, and, if your visit was logged, the organisation and the visit it came from. The message is emailed to me through Resend, with a short note of where it was sent from: approximate location and device, and, if your visit was logged, the network, how you arrived, what you read and how long you had been on the site.

If you'd rather not be logged

If your browser sends Global Privacy Control or Do Not Track, your visits are not logged and no lookups are made. You can also open any page with ?notrack=1 at the end of the address: page visits from this browser are then not logged (one flag in its local storage remembers that, and ?notrack=0 clears it), though opening the CV or a project page directly still is. A message you choose to send is still kept as described above. Crawlers and link previewers are always logged; they are programs, not people.

How long it is kept

Visits, and everything recorded with them, are deleted after 180 days. Cached network lookups are deleted after 30 days. Messages, and the emails they arrive as, are kept until I delete them.

Who can see it, and why it exists

Only me. There are no ads, no analytics services and no third-party trackers. Vercel hosts the site, the log sits in a Postgres database run by Neon, and Resend delivers messages; each handles the data only to provide that service. I keep it to understand who reads this portfolio and to answer messages, which for visitors in the UK and EU is a legitimate interest.

Your data

Email shebinofficial14@gmail.com to see what is stored about you, to correct it, to have it deleted, or to object to being logged. There is no account to look you up by, so tell me roughly when you visited and from where (a city or a company is enough). If you sent a message, the address you used is enough to find it.