1. Overview

This Privacy Policy explains how we collect, use, and protect information when you use our website. Our site is hosted on Vercel and uses Vercel Web Analytics, Vercel Speed Insights, and Vercel Firewall and related security features.

We aim to respect your privacy while still monitoring performance and protecting our service from abuse.

2. Data We Collect and Process

2.1 Data collected automatically through Vercel services

When you access our website, certain technical information is automatically processed by Vercel to deliver and monitor the service. Depending on your configuration and plan, this may include:

• Requested URL and route
• Browser type and version
• Device type (desktop, tablet, mobile) and operating system
• Network information such as connection speed
• Approximate location at country level
• Performance metrics such as page load times and Core Web Vitals

For Web Analytics and Speed Insights, this information is processed in an anonymized or aggregated way and is not used to reconstruct individual browsing histories or identify specific users.

2.2 Security-related processing (Firewall, logs, monitoring)

To protect our service against attacks, abuse, and unauthorized access, we use Vercel Firewall and other security-related features. For this purpose, Vercel may process additional data such as:

• IP address (original or forwarded)
• Coarse geolocation derived from the IP address
• User-Agent and other request headers
• Request patterns and metadata associated with potential threats
• Technical fingerprints (for example, TLS fingerprints) used to identify malicious sessions

This data is used solely for security, debugging, and operational purposes and is processed by Vercel in accordance with their own privacy and security policies.

3. Use of Vercel Web Analytics and Vercel Speed Insights

3.1 Purpose

We use Vercel Web Analytics and Vercel Speed Insights to understand how our website is performing and how it is used in aggregate. This helps us improve page speed, stability, and overall user experience.

3.2 Data characteristics

According to Vercel's documentation, Web Analytics and Speed Insights are designed to provide insights without using third-party cookies and without collecting or storing information that would allow the reconstruction of an end user's browsing session across different websites or the identification of an individual visitor.

Data points are stored in an anonymized or aggregated manner and are used to compute statistics such as page views, routes accessed, device-type breakdowns, and performance metrics. We do not use these tools to track users across different sites, to profile individuals, or for targeted advertising.

3.3 Legal basis under GDPR

For visitors in the European Economic Area (EEA), the processing of anonymized and aggregated analytics data is based on our legitimate interest in maintaining and improving the performance, security, and usability of our website (Article 6(1)(f) GDPR). Because Web Analytics and Speed Insights are designed not to collect personally identifiable information, explicit consent is generally not required for this processing.

3.4 CCPA considerations

For visitors from California (USA), we do not use Vercel Web Analytics or Speed Insights to collect, sell, or share personal information as defined under the California Consumer Privacy Act (CCPA). The data is used solely to create aggregate statistics about how our site is used.

4. Vercel Firewall and Security Features

4.1 Purpose

We enable Vercel's Firewall and related security features to protect our site from malicious traffic, spam, abuse, and unauthorized access attempts. This includes, for example, rate limiting, IP blocking, and rule-based detection of suspicious patterns.

4.2 Data processed for security

In order to provide these protections, Vercel may process and log:

• Source IP addresses and ranges (for example, for IP blocking)
• Country or region derived from the IP address
• Request metadata such as HTTP method, path, status code, and time
• Technical fingerprints or identifiers used to distinguish legitimate from malicious sessions

This information may appear in Vercel's firewall dashboards, logs or alerts so that we can identify and respond to potential threats.

4.3 Legal basis under GDPR

The processing of IP addresses and related request data for security purposes is based on our legitimate interest in ensuring the security and integrity of our website and infrastructure (Article 6(1)(f) GDPR). This includes detecting and mitigating attacks such as distributed denial-of-service (DDoS) attacks, scanning, or other forms of abuse.

4.4 Limited use

We do not use Firewall or security logs to build marketing profiles, to track ordinary users for behavioral advertising, or to otherwise evaluate individuals beyond what is necessary for security and operational troubleshooting.

5. International Data Transfers

Our site is hosted on Vercel, which may process data on servers located in various regions, including outside your country or outside the European Economic Area (EEA). Vercel states that it implements appropriate technical and organizational measures to protect personal data and comply with applicable data protection laws.

By using our site, you acknowledge that such processing and transfers may occur as part of providing the hosting and analytics services.

6. Your Rights

6.1 GDPR rights (EEA users)

If you are located in the EEA, you may have certain rights regarding your personal data under the GDPR, including:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (where applicable)
• Right to restriction of processing
• Right to object to processing based on legitimate interests
• Right to data portability (where applicable)

Because our use of Vercel Web Analytics and Speed Insights is designed not to collect personally identifiable information, these rights are typically most relevant for data you provide directly (for example, via contact forms) or for security-related logs that may include your IP address.

6.2 CCPA rights (California users)

If you are a California resident, you may have rights under the CCPA, including:

• Right to know what categories of personal information are used
• Right to request deletion of your personal information
• Right to opt out of the sale or sharing of personal information (where applicable)
• Right not to be discriminated against for exercising your rights

We do not sell or share personal information obtained through Vercel Web Analytics or Speed Insights. Any personal information processed for security purposes (such as IP addresses) is used solely to protect the service.

7. Links to Vercel's Privacy and Security Documentation

For the most accurate and up-to-date information on how Vercel processes data, please refer to Vercel's own documentation and legal notices:

• Vercel Web Analytics – Privacy & Compliance
• Vercel Speed Insights – Privacy & Compliance
• Vercel Firewall – Documentation
• Vercel – Privacy Policy

8. Contact

If you have any questions about this Privacy Policy or how we handle data, you can contact us at:

mandel59@gmail.com