privacy policy
last updated
This is a personal portfolio. It has no accounts, no forms, no comments, no analytics, no advertising, and no third-party trackers. Nothing you do here is profiled, and no data about you is sold or shared for marketing. What follows is the full account of the little that is processed anyway.
who is responsible
Gaya KACI, based in Paris, FR, runs this site as an individual and is the data controller for it. Contact: contact@gaya.anonaddy.com.
request logs
This site is a set of static files served by GitHub Pages. I run no server of my own, so I hold no record of who visits: no IP addresses, no timestamps, no user agents, nothing.
GitHub does see every request, because it answers them. GitHub states (opens in new tab) that it logs and stores each visitor’s IP address for security purposes, whether or not the visitor is signed in, and it may serve the files from a content delivery network with edges outside the EU. GitHub does this as a service provider under the GitHub General Privacy Statement (opens in new tab), which also gives its retention periods. I cannot see or change what it keeps.
the theme setting in your browser
When you switch between the light and dark theme, the choice is written to your browser’s local storage under the key theme, so the site does not flash the wrong colours on your next visit. It is one word, light or dark. It stays on your device, is never sent to the server, and identifies nothing about you. The cookies policy covers how to clear it.
if you email me
The address published on this site is a forwarding alias run by addy.io (opens in new tab), which relays mail to my real mailbox. Sending to it means addy.io and my mail provider handle the message, and I keep whatever you write for as long as the conversation is useful to either of us. I use it to reply to you and nothing else. Ask and I will delete the thread.
who else sees anything
- GitHub, Inc., which hosts the site on GitHub Pages and delivers it through its content delivery network. GitHub is the only party that handles your request, and the request logs described above are its own. GitHub is a US company; its transfers out of the EU rest on the EU-US Data Privacy Framework and standard contractual clauses, as set out in its privacy statement.
- addy.io and my mail provider, and only for mail you choose to send.
There is no one else. The project and contribution data on the home page is fetched from the GitHub API when the site is built, not when you open it, so your browser never contacts GitHub for it. Every script, style, font, and image is served from this domain; a content security policy declared in each page blocks off-origin loads outright.
Links out to GitHub, LinkedIn, X, and other sites are ordinary links. Once you follow one you are on that service, under its privacy policy, not this one.
your rights
Under the GDPR you may ask for access to the personal data held about you, its correction or erasure, a restriction on how it is processed, a copy in a portable format, and you may object to processing based on legitimate interest. Write to contact@gaya.anonaddy.com and I will answer within a month.
One honest limit: I hold no data about your visits at all, so there is nothing on my side to hand over or erase. Requests about the logs GitHub keeps go to GitHub, under its privacy statement. Mail you have sent me is a different matter, and I can find and delete that on request.
If my answer does not satisfy you, you can complain to your national data protection authority. In France that is the CNIL (opens in new tab).
children
The site is not aimed at children and asks no one for their age, because it asks for nothing at all.
changes
If the site starts doing something this page does not describe, this page changes first and the date at the top moves with it. There is no mailing list to notify, so the date is the honest signal.
cookies policy