Privacy
Who runs this site
This site is run by me, Will Stephen, as a personal portfolio. If you have any questions about your data, contact me at hello@willstephen.co.uk.
Cookies and tracking
The site sets no cookies and uses no tracking scripts. It does not use third-party analytics, advertising or fingerprinting.
What is logged
The site is served through Amazon CloudFront. Its request logs record your IP address, your browser (user agent), the pages requested, the time, your country and the network your address belongs to. The network or organisation an IP address belongs to (for example, a company's network) is also recorded in my visit records. City is not in CloudFront's request logs; I look it up locally from DB-IP data.
Links in my CVs and profiles
The links I put in my CVs, applications and online profiles carry a short code (for example, willstephen.co.uk/c/k7m2q). It lets me see which application or channel led to a visit, and which link in the CV was followed (for example, a project page or my LinkedIn profile). For visits to a short link, CloudFront also provides an approximate country and city. A visit to a short link is recorded with the code, your IP address prefix (the first part of the address only), your browser, the referring page where your browser sends one, and that approximate location.
Why
I use this to understand which applications and profiles lead to interest in my work. The legal basis is legitimate interest: a person sharing their own work wanting to know whether it is being seen. I do not use it to profile you and I do not sell or share it.
Who processes it
Amazon Web Services processes the logs on my behalf. They are stored in my own AWS account.
Location lookup
Approximate location and network are looked up locally from your IP address using DB-IP data. IP Geolocation by DB-IP, licensed under CC BY 4.0.
How long it is kept
Raw logs are deleted after 90 days. After that, IP addresses are kept only as a truncated prefix (the first three parts of an IPv4 address, the first 48 bits of an IPv6 address) and a keyed hash used to group repeat visits. Visit summaries without IP addresses (the pages viewed, approximate location, network, browser type and time) are kept.
Your rights
You can ask me for access to the data held about you, ask for it to be corrected or deleted, object to the processing, or complain to the Information Commissioner's Office. Because only truncated or hashed identifiers are kept after 90 days, I may need your IP address to find your records.