Privacy policy

Analytics are off by default. Privacy preferences let you reject tracking, allow pseudonymous interaction events, or separately allow sampled session replay. When configured, PostHog processes these events. Replay masks text and inputs and excludes the CV chat. Search terms, questions, answers and private workspace tasks are not sent as analytics events. You can withdraw permission using Privacy preferences. Your consent choice is saved in this browser; if storage is unavailable it lasts only for this page session. Analytics remain disabled until the provider is configured. Heatmaps are disabled pending a separate privacy validation.

The portfolio serves public professional information and downloadable material. If you use the CV assistant, the question you submit and a small set of reviewed public excerpts are processed to prepare an answer. Do not submit confidential, sensitive, or personal information.

Assistant requests may be processed by OpenAI through its API. The application sends the request with store: false. Answers are generated from reviewed public summaries and can still be incomplete or inaccurate.

Cloudflare hosts and delivers the site. To enforce a rate-limit, the application derives a pseudonymous bucket identifier from connection information and stores only the bucket, time window, request count, and update time in Cloudflare D1. The public site does not provide an open knowledge-ingestion endpoint.

Theme and palette choices are stored in your browser through localStorage. Rate-limit records are operational counters, not user profiles. Infrastructure providers may keep their own security and service logs under their respective policies.

You can avoid the assistant, clear site data in your browser, or stop using the site. For a privacy question, contact Pedro through the LinkedIn profile linked from the portfolio and identify the request as a privacy matter.