What this site collects

This is my personal professional website. I measure how it is used so I know whether it is doing its job, and I have tried to keep that measurement to the minimum that tells me something useful.

There are no cookies

This site sets no cookies, and it does not use local storage, session storage, or device fingerprinting. There are no third-party analytics or advertising trackers. Because nothing is stored on your device, there is nothing for you to accept or decline, which is why you are not being shown a cookie banner.

A consequence of this, deliberately, is that I cannot tell whether you have visited before. Every visit looks new to me.

What is recorded when you visit

• Which page you opened, and which link or QR code you came from
• The date and time, and how long the page was open and in front of you
• How far down the page you scrolled, and roughly how long each section was on screen
• Which buttons or links you clicked, such as the CV, WhatsApp or email
• Your device type, operating system, browser and screen size
• Your approximate location, at town or city level, worked out from your IP address
• A shortened form of your IP address, with the identifying part removed (for example 82.15.203.47 is recorded as 82.15.203.0)
• The web address you arrived from, if any
• Anything you type into the AI assistant, together with its replies

What is not recorded

• Your full IP address
• Your precise location
• Your name or email address, unless you choose to type them into the contact form
• Anything that would let me recognise you across separate visits
• Anything at all about you on other websites

Why

I send people to this site instead of attaching a CV to an email, so I need to know whether that is working: whether pages get opened, whether people read them, and which way of sharing the link is worth continuing with. The AI assistant transcripts are kept because they tell me what people actually want to know about me, and because a question asked there is often a question I should answer properly in person.

My lawful basis for this is legitimate interest. If you would rather I did not record your visit, you can block JavaScript for this site, or just email me and I will delete what is there.

Who sees it

Only me. It is not sold, shared or passed to anyone else. The data is handled by the services that run this site: Vercel (hosting), Upstash (storage), Web3Forms (sends the contact form and the visit summaries to my inbox) and OpenAI (powers the AI assistant, so what you type there is processed by them to generate a reply).

How long it is kept

Visit records are deleted automatically after 90 days, and only the most recent 2,000 visits are retained at any time. Emails that reach my inbox stay there until I delete them.

Your rights, and how to reach me

You can ask me what I hold about you, ask for it to be corrected, or ask me to delete it, and I will do that. Email dralivatan@gmail.com. If you are not happy with how I have handled it, you can complain to the Information Commissioner's Office at ico.org.uk.

Last updated 1 August 2026. Data controller: Dr Ali Vatan, Oxfordshire, United Kingdom. GDC registration 320567.