Privacy

This website is operated by Andre de Brandt. To ask about your information, request access or deletion, or object to measurement, use the contact page. You can also raise concerns with the Dutch Autoriteit Persoonsgegevens.

Shared access

Shared links can grant public or private access. Link records may include a label, recipient, organization, sharing source, and notes supplied when the link is created. Recipient metadata is supplied by the operator when creating a link, using professional contact information. These records support access management; a recipient label does not establish the identity of someone who redeems a forwarded link.

Private access uses a secure, HttpOnly functional cookie, valid for at most 24 hours and limited by the link’s expiry. The server checks expiry and revocation again on protected requests. Public-only links do not create private authorization. An optional, separate page-measurement cookie is set only if you explicitly allow it.

Link measurement

Aggregate redemption measurement is enabled for links whose measurement setting is on. Its purpose is to understand which sharing sources, such as a CV or GitHub profile, lead people to this website. Source links are not assigned to individual visitors. Optional recipient metadata, if supplied for a particular link, makes that link record personal data even though its counts are aggregated. The existing shared access credential is not measured.

Measurement records each successful token-redemption time with second precision, as well as daily counts and first/last times. These are associated with the shared link, without a visitor or session identifier. Historical daily counts collected before detailed recording began cannot be expanded into individual timestamps. No fingerprints, IP-based identities, or session replay are collected. Repeated use, forwarding, and automated scanners can all produce redemptions; they do not prove the intended recipient personally opened the website.

Redemption events, optional page observations, and daily aggregates are retained for a rolling 12 months. First/last and total figures refer to that retained history. Active links are reviewed annually; revoked or expired records and their counters are deleted after 90 days, with earlier deletion available. Administrative audit records are retained for 90 days.

Optional shared-link page observations

When opening a measured link, you can Allow or Decline page measurement. Both choices grant the same website access. Only Allow creates a separate secure, HttpOnly cookie that attributes browser-reported page names and observation times to the shared link for up to 30 minutes, limited by link expiry. It carries the link reference, not a visitor or redemption identifier. The cookie is not used to grant private access. A new redemption replaces the previous attribution; Decline clears it.

Page observations and redemption timestamps are separate streams for the link, not individual browsing journeys. They may contain activity from several people or automated browsers, and do not establish who opened a page. Only allowlisted page paths are stored, never URL queries/fragments, request headers, IP addresses, or referrers. You can turn off page measurement using the footer control without losing website access. Closing the browser does not necessarily remove the cookie before its 30-minute expiry. Page observations are retained for 12 months and deleted with their link.

General website measurement

General website measurement is enabled and controlled separately from shared links. It counts successful HTML page requests, page views reported by visible browser pages, and selected sections visible for at least two seconds. These metrics are reported separately and may include repeat views and automated traffic; they are not unique visitors or sessions. Only daily aggregate counts by page/section and a broad request classification are stored. No analytics cookies, persistent visitor identifiers, link attribution, raw IP addresses, individual events, or navigation histories are stored in these statistics. Aggregates are retained for 12 months.

Contact and service providers

The contact form processes the name, email address, subject, and message you provide to respond to your enquiry. Cloudflare hosts the website and provides Turnstile abuse protection; Resend delivers submitted messages. Public and profile pages also load Google Fonts resources, which send routine network requests to Google; the access entry page does not load third-party fonts or scripts. Security controls process request metadata for abuse prevention separately from analytics. Access-exchange rate limits use keyed hashes with a 120-second expiry; contact-form rate limits use keyed hashes retained for up to one hour. Raw IP addresses are not stored in these application rate-limit records or associated with link reporting.

Cloudflare and Resend process information to provide these services. Provider infrastructure logs, international processing arrangements, and contact-message retention remain part of the privacy review. Provider recovery history can temporarily retain deleted data; subsequent deletions and revocations must be reapplied after a restoration.

Privacy review and your choices

Redemption timestamps and counters operate under the operator’s requested limited-purpose measurement; a completed legitimate-interest balancing assessment and determination under Dutch terminal-access rules remain outstanding for that existing measurement. Expanded shared-link page observations rely on your explicit optional consent. Opening a link, scrolling, or continuing to use the website is not consent to page measurement. This notice does not claim a tracking exemption. You can contact the operator to object, request deletion, or ask for measurement on your link to be disabled; measurement can be disabled without withdrawing its access permission.