Privacy

What this site knows about your visit.

This is a personal portfolio. It has no accounts, no cookies, no advertising and no third-party analytics. It does keep a small first-party record of how it is used, so I know whether the site does its job, and this page says exactly what that record contains. Last updated 9 September 2026.

What is recorded

When a page opens, and when it closes, the browser sends a short message to this site only. It contains:

• The page you opened and where you came from: the referring site if your browser shares it, and a campaign tag from the link if it happens to carry one.
• Your country, region and city, as already resolved by the hosting provider from the connection. Your IP address itself is never stored.
• A coarse picture of the device: phone or desktop, operating system and browser family, screen and window size, language, timezone, light or dark theme, and whether reduced motion is on.
• How the visit went: how long the tab was visible, how far you scrolled, which sections came into view, and the page’s own speed measurements (Core Web Vitals).
• Which of the site’s outbound links you clicked: email, LinkedIn, GitHub, the resume, and the links to my projects.
• Questions typed into “Ask the page”, trimmed to 200 characters, so I can see what the page fails to answer.

How visits are counted

Nothing is written to your device. Each request is counted under a pseudonym made by hashing your IP address and browser signature together with a secret and the current date. That is enough to tell two page views from one person apart from two people on the same day, and no more: tomorrow the same browser is a new visitor, and the raw address is never kept. This is the same approach privacy-first analytics services such as Plausible and Fathom use, and it is why there is no cookie banner.

What is deliberately not collected

• No cookies, no local storage identifiers, no cross-site tracking, no fingerprinting (no canvas, audio or font probing).
• No third-party scripts of any kind: no Google Analytics, no tag managers, no ad or social pixels.
• No IP addresses and no third-party geolocation lookups.
• Nothing about you is ever sold, shared or combined with other data. The record exists to answer “is anyone reading this, and from where?”.

“Ask the page”

The assistant on the home page answers from the text of this site. To do that, the question you type is sent to OpenAI’s API together with that text. No name, email address, identifier or location goes with it. Under OpenAI’s API terms the request is not used to train their models. If you would rather not use it, every answer it can give is already written on the page.

Your choices

• If your browser sends the Global Privacy Control signal or has Do Not Track turned on, this site records nothing at all for your visit.
• Content blockers that stop first-party analytics work here too. The site does not try to get around them.
• The record is pseudonymous, so I cannot look up an individual visitor. If you want everything about a visit removed anyway, email me with the approximate date and time and I will clear that window.

Retention and legal basis

The log keeps a rolling window of roughly the most recent fifty thousand events; older entries drop off automatically. Where the GDPR or UK GDPR applies, the basis for this measurement is legitimate interest (Article 6(1)(f)): understanding how a personal website is used, with data minimised to the point where no individual is identifiable.

Contact

Questions about any of this go to ankit5kumar14@gmail.com. The site’s source is public at github.com/AnkitKumarMishra5/portfolio, including the code that does the measuring.