← christos-antoniou.com

Privacy

This is a personal portfolio, not a business, and it collects what a portfolio needs to know: whether anyone read it. Here is exactly what that means.

What is recorded

Thing	Why
That a page was opened, and how far down it was read	To know whether the work section is reached at all.
The CV being downloaded, outbound clicks to GitHub or LinkedIn, use of the email link	These are the only outcomes this site has.
Questions asked of the assistant, with its answers	To find out when it answers badly. It speaks as a real person to people who may be hiring, so a wrong answer matters.
Country, device type, operating system, browser, and the site that linked you here	Inferred from the request. No location beyond country.

What is not recorded

• No IP address and no browser fingerprint are stored. The database keeps a one-way hash of them, keyed with a secret that includes the date — so the same person is one anonymous identity for a day and a different one tomorrow. Nobody can be followed across weeks, and nothing in the database can be turned back into an address.
• No third-party trackers, no advertising, no analytics network. No Google Analytics, no pixels, nothing shared with anyone for marketing. Data is never sold, and there is nobody to sell it to.
• No account, no profile, no email address unless you type one into the contact form yourself.

Cookies

Two, both first-party, both containing nothing but a random identifier: one that lasts a year so a returning reader is not counted twice, and one that expires after 30 minutes of inactivity to group a single visit. No advertising cookies, and nothing readable by any other site.

Switching it off

The site honours Global Privacy Control and Do Not Track. If your browser sends either signal, nothing is recorded, no identifying cookie is set, and the owner's notification arrives without any detail about you. There is no banner to click because there is nothing to consent to: turn the signal on and the answer is already no.

Firefox and Brave send GPC by default; Chrome and Safari have it behind a setting or an extension.

Who else sees anything

• The assistant's replies are generated by Groq, which receives the text of your question in order to answer it. Do not type anything into it you would not put in an email.
• The site is hosted by Railway and served through Cloudflare, both of which see requests the way any host does.
• The owner gets a notification when the assistant is used, containing the question, the answer, and the request's own details. It is read and not kept.

Keeping and removing

Records are deleted after 12 months. Not "when we get around to it" — the site deletes them itself, on a schedule, and a promise about data that depends on somebody remembering is not a promise. Nothing is used for any purpose beyond seeing how the site is doing.

To have anything connected to you removed, or to ask what exists, email [email protected] — though in most cases the honest answer is that nothing stored can be linked back to you: the visitor hash rotates daily and cannot be reversed.