Last updated: October 2026
This site is a personal portfolio and blog. It is built to collect as little personal data as possible.
What is collected
- Analytics (no cookies). Page views are counted with GoatCounter, which sets no cookies and does not track you across sites. It records the page, referrer, browser/OS family, screen size and country derived from your IP address; the IP itself is not stored.
- Server logs. Requests are logged for security and debugging without your IP address. Logs are rotated and kept for a short period.
- Error reports. If a page crashes, a technical error report is sent to Sentry with cookies and authorization headers stripped and no personal data attached.
- Accounts (optional). If you create an account, your username, email address and a hashed password are stored. Failed login attempts (username, IP address, time) are recorded to block brute-force attacks and are deleted automatically after 30 days.
Cookies
The site sets no tracking or advertising cookies. Strictly necessary cookies are only set when you submit a form or sign in (csrftoken, sessionid). No consent banner is needed for these.
New blog posts are shared to a Facebook Page. This site does not embed Facebook scripts, pixels or "like" buttons, so Facebook receives nothing from your visit here. If you follow a link to Facebook, Facebook's own privacy policy applies there.
Where data is stored
The site is hosted on Amazon Web Services. Uploaded images and database backups are stored in private Amazon S3 buckets.
Your rights (GDPR / PIPEDA)
You can ask for a copy of your data, its correction, or its deletion at any time by emailing the address below. Account data is exported or erased within 30 days of a verified request.
Contact
nikkomidoy@gmail.com