$ cat privacy.md
Privacy, in plain language
Last updated: July 2026. This is a personal portfolio site. Here is everything it does with data - written by a human, for humans.
Analytics
The site uses Google Analytics 4 to count visits and see which pages people read. It collects approximate location (city level), device type, and pages visited. I use this to understand what content is useful - nothing else. Vercel Speed Insights also runs; it measures page speed and is cookieless. These are loaded through Google Tag Manager, which is also what loads the two tools below.
Session recording
Microsoft Clarity records how people use the site: mouse movement, clicks, scrolling, and which parts of a page get attention. It replays as an anonymous session, and I watch it to find layout that confuses people. It is more than counting visits, which is why it is its own section rather than a line in the one above. Clarity masks text you type by default, and I have not turned that off - but do not type anything sensitive into a form here on the assumption that no tool ever sees it. Microsoft has its own privacy policy.
Advertising
A Google Ads remarketing tag is present. Its only purpose is to let me show an ad to someone who already visited, on other sites in Google's network. It is the one thing on this site that follows you elsewhere. If that bothers you, decline - nothing about the site changes if you do.
Your choice
Analytics, session recording, and the advertising tag are switched off until you accept them if you are in the EU, UK, or Switzerland - the banner is the switch, and declining is a real no, not a dismissal. Elsewhere they start on, and the button below turns them off for good on this browser. Either way the choice is stored locally, so clearing site data asks again.
Contact form
When you send a message, your name, email, and message are emailed to me via Mailtrap and land in my inbox (contact@adityadev.in). The form also notes which page you were on and how you first arrived (the referring site), so I know what content brought you here. None of it is stored in any database, shared with anyone, or added to any mailing list. Server errors are logged for 30 days without message contents.
Newsletter
If you subscribe to the field notes, your email address is sent to Buttondown, the service that delivers the emails and has its own privacy policy. You'll get a confirmation email first (double opt-in), every email has an unsubscribe link, and unsubscribing removes you completely. Your address is used for nothing else.
Booking
“Book a call” goes to cal.com, which handles the scheduling and has its own privacy policy. I receive the details you enter there (name, email, notes).
The AI assistant
The terminal widget in the corner is live. Messages you type are sent to Anthropic's Claude API through the Vercel AI Gateway to generate an answer, and may be logged by me to debug quality. Your IP address is attached to the request as the gateway's user identifier, which is what enforces the per-visitor rate limit of ten questions an hour. Don't paste anything sensitive into it - it's for asking about my work.
Cookies & storage
Your theme choice (dark/light) is kept in your browser's localStorage. GA4 sets its standard cookies. That's the whole list.
Removal
Want anything you sent me deleted? Email contact@adityadev.in and it's gone within a week, no questions.