Privacy & analytics

What is collected

The analytics endpoint receives the page or portfolio section viewed, timestamp, campaign code from a valid ref parameter, external referrer hostname, broad device/browser/operating-system family, approximate country, region, and city supplied by the hosting platform, and whether a visible CV download link was clicked before the file was requested.

A raw IP address is used briefly in server memory to create a secret-keyed one-way value for weekly visitor and session counting. The raw address is not stored, returned to the browser, or included in email. For CV file requests only, the address may also be sent briefly to IPinfo to obtain the network ASN, organisation name, and domain; only those network fields are stored. No browser fingerprint, advertising identifier, precise location, raw user agent, or device model is collected.

Why it is collected

The information is used to produce aggregate statistics about portfolio usage and application-link campaigns and to distinguish likely human interaction from automated scanners, crawlers, previews, and repeated requests. It is not used for advertising, sold, or used to build profiles across websites. Short journey summaries may appear in CV-download and weekly operational emails, but are not retained in the long-term aggregate report.

Storage and retention

Temporary pseudonymous sessions and page views are stored in Supabase for up to eight days. Weekly reports contain totals rather than visitor or session identifiers and are retained for up to thirteen months. Vercel hosts this site, Supabase stores the analytics data, IPinfo provides optional network enrichment for CV requests, and Resend delivers reports and confirmed CV-download notifications.

There is no persistent analytics cookie. Preference cookies are used only to remember that the notice was dismissed or that analytics were declined. Browser Global Privacy Control and Do Not Track signals are also honoured.

Your choice

You can turn analytics off at any time. Opting out also requests deletion of temporary rows associated with the current short-lived pseudonymous value. Clearing browser cookies may clear this preference.

Questions

For privacy questions or requests, email hello@dominicwood.dev. Because no contact details are attached to analytics rows, it may not be possible to associate a row with a named person.

Last updated: 24 August 2026