Jimmy Chen

Privacy

Privacy notice

Last updated: 3 August 2026

This is a personal website. It does not use advertising trackers or client-side analytics. The site stores only the information needed to deliver a requested resume, display public responses, and handle abuse or privacy requests.

When you browse this site

Pages are delivered through Cloudflare and mirrored on GitHub Pages. Those providers may process connection data such as your IP address as part of delivering and securing the service. I do not send raw request logs to another database or retain IP addresses and User-Agent strings myself. Traffic measurement is limited to aggregate, server-side or edge data.

No non-essential cookie is set on the public site. The theme preference is stored in your browser. A future protected resume service may use authentication cookies only as needed for that session; the public site does not set them today.

Comments and responses

Public Webmentions—replies, likes, and reposts—may be shown with the author's name, source link, and a locally cached copy of the public avatar; replies may also include the public reply text. Avatars are downloaded during the site build, converted to a static WebP file, and are not requested from the author's server by your browser.

Reply text may be sent to OpenAI's moderation endpoint. Structured author fields (name, avatar, profile URL) and visitor connection data are not attached to that request; the reply body itself is sent as written and may still contain personal data the author put in the text. A flagged reply is hidden; a service outage does not block the rest of the build. Public GitHub Actions run summaries only report aggregate counts for this step—not individual Webmention IDs, source URLs, or reply text.

Giscus is not loaded until you select the GitHub tab below an article. At that point your browser connects to GitHub and Giscus, and their privacy terms apply. This choice is not remembered by this site.

Resume requests

Full-resume requests currently go to my ordinary contact mailbox as normal email. I reply manually. There is no live automated grant service, invite link, DMARC gate, download counter, or resume database on the public site yet. I do not store those requests outside my mailbox unless we continue the conversation by email.

When an automated delivery service ships later, this notice will be updated before any automated entry points go live, including retention for grants, invite links, and download events.

Your requests

You may ask what identifiable data is held about your email address, ask for a correction, or request early deletion. Send the request to [email protected]. Control of the relevant mailbox may be verified with an email one-time code; identity documents are not requested. I aim to respond within one month. Data needed for an active security incident, abuse investigation, or legal claim may be restricted and retained for that purpose.

Services used

This notice follows GDPR data-minimisation and transparency principles as a practical baseline. It is not a claim of certification or a guarantee that every jurisdiction's law applies in the same way.