Privacy & tracking, in plain words.
This is a personal site for a job search. I don't make money by tracking you, so this page is short — but I'll be honest: as of this version I keep a small visitor log so I can see which recruiters are interested and reply faster. Here's exactly what (it matches what you'll see in DevTools).
1) What I don't do
- · No cookies of any kind for visitors, and no “consent banner” for you to click.
- · No Google Analytics, third-party analytics or ad scripts, and no cross-site identity linking.
- · No third-party IP-lookup service — your raw IP only exists momentarily inside Vercel; it is never stored and never sent anywhere.
- · I never sell your data. The only cookie anywhere is the owner's httpOnly admin-session cookie on my own device — nothing to do with visitors.
2) What I log
When you ask the AI twin a question: the time, a rough location (city/region/country only, worked out server-side from Vercel's request headers), the text of your question (stored truncated), and a daily-rotating one-time fingerprint (a salted hash of your IP, used only to de-duplicate within a single day — it changes the next day, so it can't track you across days or be used to look up who you are). Each question also pings the owner's Feishu bot, and I may email myself a daily digest (via Resend). I also keep a single aggregate count of résumé downloads — a plain number, with no location or identifier attached. Lawful basis: my legitimate interest in this job search (GDPR); under China's PIPL I'll ask your consent for this logging. You can object or ask me to delete at any time.
When you open a page: one visit is added to a per-day aggregate — page path, rough city, and a de-duplicated visitor count built with the same daily-rotating fingerprint. There are no per-visit records, and the de-dup count lives in a cardinality sketch (HyperLogLog): it can only answer “roughly how many” — I cannot recover your IP or identity from it. If your browser sends “Do Not Track” or Global Privacy Control, nothing is counted at all — turn it on and I'll respect it. Per-day aggregates expire after 90 days; the only thing kept longer is a single total-visits number.
3) Where it lives / cross-border
Question logs and the visit counters are stored in Upstash Redis (a hosted database, pinned to an EU region where possible); notifications go through Feishu/Lark (China or the international edition, depending on the webhook); the digest goes via Resend (US). That's a cross-border transfer and I'm telling you plainly. Logs are kept for a set period and auto-deleted on a schedule (questions after 30 days; any details you leave are kept only while we're in touch about a role).
4) Your rights
To see, correct, or delete records related to your questions, email 1653120857@qq.comwith the rough time of your visit (I delete by time window, since I hold no stable identifier that could trace back to you). AI answers may be wrong — rely on the résumé and a direct chat for anything important. This switch from “zero logging” to light logging is written up in full in the build log.