# What this site collects, and what it does not.

> The privacy notice for mesmaeili.com: consent-gated analytics, no tracking before consent, self-hosted fonts, and short-lived server logs.

Canonical HTML version: https://mesmaeili.com/privacy

Last updated 2026-08-22. This site is a personal portfolio. It has no accounts, no sign-up, no comment system, and no contact form. There is nothing to submit here, so there is nothing for me to store about you beyond what is described below.

## Who is responsible

Mohammad Esmaeilimoakhar, Munich, Germany. Questions about this notice, and any request under the GDPR, reach me at m.esmaeilimoakhar@gmail.com and are answered by me personally.

## Analytics

This site uses Google Analytics 4 (measurement ID G-1SJ3S04ZM8) and nothing else. The analytics script is only loaded after you explicitly accept it in the consent banner. If you choose Essential only, or simply ignore the banner, no analytics script is ever requested and no analytics cookie is ever written. Consent is opt-in, not opt-out.

When analytics is accepted, Google Analytics records anonymous page and visit signals: which pages were viewed, in what order, roughly where in the world the request came from, and what kind of device made it. I use this to see which parts of the portfolio are worth keeping. I do not sell personal data, I do not run advertising, and I do not build profiles of visitors.

## Cookies and local storage

- **cookie-consent**: A local storage entry, not a cookie. It records your accept or decline choice so the banner does not ask again. It stays in your browser and is never sent to a server.
- **_ga and _ga_* cookies**: Set by Google Analytics only after you accept analytics. They distinguish one visit from another. Declining means they are never created.

You can change your mind at any time with the Cookie settings link in the footer. Clearing your browser storage for this site resets the choice and the banner will ask again.

## Server logs

The site runs as a container on a server operated by Hetzner Online GmbH in Germany. The reverse proxy in front of it keeps ordinary request logs: IP address, timestamp, requested path, response status, user agent, and referrer. These logs exist for security and troubleshooting, they are kept only as long as that requires, and they are not combined with analytics data or used to profile visitors.

## Third parties

- Fonts are self-hosted. They are built into this site at deploy time and served from this domain, so viewing a page sends no request to Google Fonts.
- Google Analytics is the only third-party script, and only after consent. The provider for visitors in Europe is Google Ireland Limited.
- Opening the live demo inside a project gallery loads that project from its own domain, playconnect.space or settli.online. Those are my products and their own privacy notices apply once you are inside them.
- Links to LinkedIn and GitHub are ordinary outbound links. Nothing is sent to them unless you follow the link.

## Your rights

Under the GDPR you can ask for access to, correction of, or deletion of personal data relating to you, object to processing, ask for a copy of your data, and withdraw consent at any time without affecting what happened before you withdrew it. Write to m.esmaeilimoakhar@gmail.com. You also have the right to complain to a supervisory authority, which in Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht.

## Changes to this notice

If what this site collects changes, this page changes with it and the date at the top moves. There is no mailing list to notify, so the date is the only version marker you need.

## More from this site

- [Home](https://mesmaeili.com/index.md)
- [About](https://mesmaeili.com/about.md)
- [Contact](https://mesmaeili.com/contact.md)

- [Agent instructions](https://mesmaeili.com/agents.md)

- [Site index for language models](https://mesmaeili.com/llms.txt)