1. Fundamental Commitment

Privacy on this site is treated as an engineering constraint rather than a legal formality. This is a personal website, portfolio, and engineering publication. We do not sell, rent, monetize, or trade any personal data. We do not run cross-site advertising trackers, behavioral profiling engines, or marketing data brokers.

We adhere strictly to the principle of data minimization: we only collect or process the absolute minimum amount of technical data needed to deliver fast, secure, and reliable pages to your device.

2. What Information We Process

Direct Communications

There are no public visitor registration portals or submission forms storing your identity. If you contact me directly via email at [email protected], your email address, name, and message content will be used solely to converse with you and address your inquiry. Your correspondence is never shared with third parties for commercial purposes.

Interactive Reader Polls

Articles may include interactive choice polls. When you vote in a poll:

  • No Account Required: You do not log in or provide personal details.
  • Pseudonymous Token: Your browser creates a random 20-character token stored in local storage (poll-voter) to let you view, change, or retract your vote.
  • One-Way Hashing: On the server, your token is combined with the poll ID and converted into a SHA-256 cryptographic hash. The raw token is never stored in our database.
  • No IP Logging: Votes are stored without IP addresses. To prevent burst voting attacks, an ephemeral hash of your IP is kept in memory/KV for at most 120 seconds to enforce a rate limit of 10 votes per minute, after which it is purged.
  • Functional Cookie: A strictly functional HttpOnly, Secure, SameSite=Lax cookie (poll_<id>) is issued to prevent duplicate ballots.

Privacy-Preserving Telemetry & Analytics

To understand how readers discover articles and verify that pages load properly, we use privacy-first analytics:

  • First-Party Cookieless PostHog: Ingested through our own origin reverse proxy (/ingest), which strips all cookies and authorization headers before forwarding.
  • No Cookies & No Profiles: Initialized with cookieless_mode: 'always' and person_profiles: 'never'.
  • No Session Replay: Session recording is disabled (disable_session_recording: true).
  • Parameter Scrubbing: Query strings, URL fragments, search keywords, and tracking parameters (such as utm_*, gclid, and fbclid) are stripped client-side prior to dispatch.
  • Respect for Signals: We honor Do Not Track (DNT) headers and the Global Privacy Control (GPC) standard.
  • Instant Opt-Out: You can opt out at any time using the toggle at the bottom of every page, which instantly stores your refusal and halts event dispatch.
  • Cloudflare Web Analytics: Cookieless, privacy-preserving aggregate metrics provided by Cloudflare without storing client-side state.

Third-Party Embeds

Occasionally, technical posts reference third-party demonstrations or social posts (e.g., YouTube videos, Threads, or Facebook updates).

  • YouTube videos are embedded exclusively through the privacy-enhanced domain https://www.youtube-nocookie.com.
  • Social embeds run inside sandboxed iframes governed by Content Security Policy restrictions.

3. Cookies and Local Storage

We do not set any advertising, tracking, or marketing cookies. We only use strictly necessary functional state (such as recording your dark/light theme preference, sound toggle preference, your poll vote, or your analytics opt-out). For full technical details, see our Cookie Policy.

For readers in the European Economic Area (EEA), United Kingdom, and jurisdictions with comparable data protection regimes:

  • Legitimate Interests: We operate strictly necessary infrastructure, prevent automated abuse and DDoS attacks, and measure aggregate page reach using cookieless, de-identified telemetry under Art. 6(1)(f) GDPR.
  • Consent: Where voluntary communication occurs (such as an email inquiry or casting a poll vote), processing occurs on the basis of your affirmative action.

5. Data Retention & Security

All network communication is encrypted in transit using modern TLS (with HSTS preload enforced). Secrets and administrative credentials reside solely on secured edge servers and are never exposed to browser bundles. Ephemeral rate-limiting tokens expire within two minutes. Reader poll votes persist in Cloudflare KV without personal identifiers.

6. Your Rights

Under GDPR, CCPA/CPRA, and applicable data privacy laws, you have the right to request access to, rectification of, or erasure of any personal data we hold about you. Because we do not maintain visitor accounts or identifiable visitor profiles, we cannot link browsing logs or poll tallies to individual identities.

To exercise any data rights regarding direct email correspondence, please contact [email protected].

7. Updates to This Policy

Any modifications to this privacy policy will be published directly at this URL with an updated effective date and reflected in our version control history.

John Nazarene Dela Pisa is an AI Specialist at FEAREX Technologies in Cavite, Philippines, building agentic systems and the infrastructure they run on. Before that he spent two years as a Solutions Architect across AWS and RHEL.

LinkedInGitHubXEmail