What this site does with information about you. It isn't much: no ads, no selling, no profiles.

Who's responsible

I am: Adam Perlis, the controller of your personal data for this site under the GDPR. Write to me at privacy@adamperlis.com about anything on this page.

Hosting

The site is hosted by Cloudflare (Cloudflare Pages). Every visit passes through Cloudflare's network, which processes your IP address, browser, the page you asked for and when, to deliver the site and protect it from attacks. I don't keep access logs.

Legal basis: my legitimate interest in a secure, working site (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU–US Data Privacy Framework.

The contact form, and email

When you send the form I receive what you typed: your name, email address, what you need and your message, along with the country your connection comes from. It's stored in my Cloudflare account and forwarded to my inbox by Cloudflare Email Routing. My inbox is Gmail (Google). Email to privacy@adamperlis.com reaches me the same way.

I use it to reply to you and to talk about the work. Legal basis: steps you've asked for before a possible contract (Art. 6(1)(b)), and my legitimate interest in answering messages (Art. 6(1)(f)). I keep it as long as the conversation and any work that comes of it need, and delete it sooner if you ask.

Spam is kept out with a hidden field and a minimum fill time. There's no CAPTCHA and no tracking.

Analytics

I use Google Analytics 4 to see which pages get read and where visitors come from. It only runs on adamperlis.com.

• In the EEA, the UK and Switzerland, it runs without cookies (Google's consent mode, with analytics storage denied). Nothing is stored on your device. Google receives cookieless signals (the page, the referring site, your browser and an approximate location) and uses them to estimate visits in aggregate.
• Elsewhere, it sets first-party cookies (_ga and _ga_*, kept up to two years) to tell visits apart.
• Advertising features are off everywhere. There's no ad storage and no personalisation.

When the contact form sends, Analytics records that it happened, but none of what you wrote. The provider is Google Ireland Limited, and data may be transferred to the US under the EU–US Data Privacy Framework. Legal basis: my legitimate interest in knowing how the site is used (Art. 6(1)(f)), which you can object to at any time.

Turning it off is remembered in this browser. If your browser sends a Global Privacy Control signal, Analytics doesn't load at all.

Other sites' content

• How I built this shows a few posts from X. X's script loads only when one comes near the screen. Then X receives your IP address and browser information, and may set its own cookies (see X's privacy policy).
• Playground demos load code libraries from jsDelivr (cdn.jsdelivr.net), and one loads a font from Google Fonts. Those providers receive your IP address when a demo loads.
• Links to YouTube, LinkedIn, the App Store and elsewhere are plain links. Nothing is sent to them until you click.

Kept in your browser

The site itself sets no cookies. It keeps a few settings in your browser's local storage so they hold between visits:

• whether Buddy's voice is on (buddy-voice, buddy-sound-ack);
• whether you've seen the intro (intro-ran);
• your choice above about Analytics (analytics-off).

They never leave your device. They're there because you asked for those features, which is all the ePrivacy rules require for storage like this (Art. 5(3) of the ePrivacy Directive; § 25(2) TDDDG in Germany). Clearing your browser's site data removes them.

Your rights

You can ask me for a copy of the data I hold about you, and to correct it, delete it, restrict its use or hand it over in a portable form. You can also object to processing based on legitimate interest (Arts. 15 to 21 GDPR). Write to privacy@adamperlis.com.

You can also complain to a data protection authority, for example the one where you live or work. There's no automated decision-making on this site, and I don't sell or share your data with anyone beyond the providers named here.

Changes

If the site starts doing something new with your data, this page changes first, with a new date at the top.