Privacy
Privacy policy
This is a personal portfolio site. It sets no cookies, shows no adverts, and does not track you from one site to another. The short version: unless you send me a message, the only thing recorded is an anonymous page count.
Who
Who is responsible
This site is run by me, Oliver Neal, as an individual, from the United Kingdom. For anything on this page you can reach me at [email protected]. I am the data controller for the information described below.
Contact form
If you send me a message
The contact form asks for your name, your email address and your message. I use them to read your message and to reply to it, and for nothing else. I do not add you to a mailing list, and I do not pass your details to anyone for marketing.
The form is delivered by Formspree, a third-party service that receives the submission and forwards it to my inbox. A copy is held in my Formspree account and in my email. The lawful basis is legitimate interest: you contacted me and expect a reply.
I keep enquiries for as long as the conversation is useful, and clear out old ones periodically. Ask me to delete yours and I will.
- Formspree's own policy: formspree.io/legal/privacy-policy
You can skip the form entirely and email me directly at [email protected].
Analytics
Counting visits
I use GoatCounter to see which pages people actually read. It is privacy-focused by design: it sets no cookies, collects no personal data, and does not follow you to other sites. There is nothing here to consent to, which is why you have not been shown a cookie banner.
What it records per page view:
- the page address, its title, and any query string on it
- the site you arrived from
- your screen width
- your country, and your browser and operating system, worked out at the server from your IP address and browser identifier
Alongside page views I count a few named events, so I can tell whether the site is doing its job: that a CV was downloaded, that someone followed a link out to itch.io or GitHub, that a breakdown was opened, that a code excerpt was copied, or that the contact form was submitted. These record only that the thing happened. They carry no identifier, and they are not tied to a visitor, a session or to each other, so they cannot be assembled into a picture of one person's visit.
Your IP address is used only to work out the country and to tell repeat views apart. It is not stored alongside the page view, and the value used to recognise a returning visitor is discarded daily, so visits cannot be linked back to you or joined up over time.
- GoatCounter's own policy: goatcounter.com/help/privacy
If you would rather not be counted, use the button below. It stores a single flag in your browser that tells the counter to skip you on every page here, and it takes effect immediately. Any content or script blocker will also stop it.
The flag lives in this browser only, so clearing your site data removes it and you would need to set it again.
Third parties
Other services this site touches
Loading a page here causes requests to a small number of other companies. I have no control over what they log, so their policies apply as well as this one.
- Google Fonts serves the typefaces. Your browser requests them from Google, which means Google sees your IP address and general browser details. No cookies are set by this.
- GitHub Pages hosts the site. GitHub processes the request, including your IP address, in its server logs for security and reliability.
- Formspree, but only when you submit the contact form, as described above.
Nothing on this site is embedded from anywhere else. There are no YouTube or itch.io players, no social media widgets and no comment system, so those companies see nothing unless you choose to click a link through to them. Once you follow an outbound link, that site's privacy policy takes over.
Your device
What is stored in your browser
One item, and it never leaves your device: a
theme entry in local storage remembering whether you
chose light or dark mode, so the site does not flash the wrong
colours on your next visit. It is not a cookie, it is not sent to
me or to anyone else, and clearing your browser data removes it.
Your rights
What you can ask for
Under UK GDPR and the Data Protection Act 2018 you can ask me for a copy of what I hold about you, ask me to correct it, ask me to delete it, or object to my holding it. In practice that only ever means a message you sent through the contact form, since the analytics hold nothing that identifies you.
Email [email protected] and I will deal with it within 30 days. If you are unhappy with how I have handled it, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
Updates to this policy
If I add something to the site that changes any of the above, I will update this page and change the date at the top. The page history is public in the site's GitHub repository if you want to see exactly what changed and when.