Privacy and cookies.

Analytics, only if you agree

On your first visit a Cookiebot banner asks whether you accept statistics cookies. Until you choose, and if you decline, Google Analytics and PostHog don't load and nothing is stored on your device.

If you accept, they record the pages you view and what you do on them: opening a case study, how far you read, revealing my email address, sending the contact form. They never receive what you type into the form. Neither is used for advertising. PostHog is its EU Cloud service. Google Analytics keeps this data for 14 months.

If you arrived from a link in one of my applications, your browser also remembers which application for 90 days, so a later visit counts towards it.

Cookies set once you accept: _ga and _ga_<id> for Google Analytics and ph_<id>_posthog for PostHog, each for up to a year. Cookiebot's own CookieConsent cookie remembers your choice for 12 months.

Links in documents I send

The links in the CVs and portfolio pages I send for a job application carry that application's name, for example danielgorgonia.com/r/acme-product-manager/…. When you follow one, this site's own server records that it was opened: which application, which document and link, when, the country, and your network's number. It then takes you to the page.

To count repeat opens once, it keeps a code made from your connection that changes every day. It never stores your IP address. This happens whatever you choose in the banner, because nothing is read from or stored on your device. I use it to know whether an application I sent was read, which is my legitimate interest under UK GDPR.

Your choices

Change or withdraw your consent at any time with Cookie settings at the foot of every page. Withdrawing deletes the Google Analytics and PostHog cookies. If your browser sends Global Privacy Control, none of it loads at all, and with JavaScript off nothing is measured.

The contact form

What you send through the contact form reaches me by email and isn't stored on this site. The form and the email reveal are protected by Cloudflare Turnstile, which loads only when you use them.

Questions about any of this: get in touch.