Privacy

What I collect

Identifiers: if you use the contact form, your name, email address, and message. Your IP address is read only to rate-limit spam.

Internet activity: which pages are read, referrer, coarse device and location, from Vercel Analytics on every visit, and from Google Analytics only if you accept the prompt. Vercel also records a few conversion events — contact form sent, a click on my email address, or a click to GitHub / LinkedIn / another site — as a yes/no and a hostname, never the message or the email you typed.

I do not collect payment information, account credentials, government IDs, precise geolocation, or sensitive personal information. I do not run a newsletter or advertising pixels.

Why, and how long

Contact messages are used only to reply to you. They land in my inbox via Resend and stay there until I delete the thread — typically after the conversation is over, and not longer than two years.

IP addresses used for rate limiting live in server memory for at most ten minutes and are not written to a database. Vercel's operational request logs (IP, user agent, path) are kept by Vercel for security and hosting, according to their own retention.

Analytics data is kept by Vercel and, if you accept, Google, under each vendor's retention settings. I do not build a marketing profile from it.

Vercel Analytics

The site uses Vercel Web Analytics to see which pages get read, where traffic comes from, and coarse device and location data. It does not set cookies. Visitors are distinguished with an anonymized identifier rather than a persistent cookie, and no data is sold or used for advertising. Custom events are the same: no names, inboxes, or message text. This script loads on every visit — declining the cookie prompt does not turn it off, because there is no cookie to consent to. See Vercel's privacy policy.

Google Analytics

Google Analytics 4 is optional. It only loads after you accept the cookie prompt shown on your first visit — declining, or ignoring it, means no Google Analytics script runs and no Google Analytics cookie is set. It is not configured with ad personalization or Google Signals, and no data is sold or shared for advertising.

If you accept, Google Analytics sets a first-party cookie (typically named _ga and _ga_*) to distinguish unique visitors and collects standard web analytics: page views, referrer, approximate location derived from IP address, and device/browser type. If you accept, a successful contact form or a click on my email is also sent as a generate_lead event — still without the message contents. See Google's privacy policy for how Google itself handles that data.

A browser Global Privacy Control (GPC) signal is treated as a decline. Google Analytics will not load while GPC is on, even if you previously accepted.

Contact form

Messages sent through the contact form are delivered by email via Resend to my inbox, and a confirmation copy is sent back to the address you entered. Submissions are checked server-side with a honeypot field and a timing check, and are rate-limited by IP address, purely to filter spam. Nothing you submit is used for analytics, marketing, or shared with anyone beyond replying to you.

Theme preference

Your light/dark mode choice is stored in local storage on your device. It never leaves your browser.

Who processes data

The site is hosted on Vercel, which logs standard request data to operate and secure the infrastructure. Contact email is sent through Resend. Google processes analytics only after you accept. I do not sell personal information and I do not share it for cross-context behavioral advertising.

Your rights (California)

If you are a California resident you can ask me to tell you what personal information I have, correct it, or delete it. You can also opt out of sale or sharing — this site does not sell or share in that sense, and GPC is treated as that opt-out for Google Analytics. Email adam@alakeli.com from the address the request is about. I will not deny service or change the site because you asked.

Children

This site is a professional portfolio. It is not directed at children under 13, and I do not knowingly collect their information.

Visitors outside the United States

The site is operated from California. Hosting and, if you accept, Google Analytics may process data in the United States. I do not target the European Union with ads or tracking.