Privacy and cookies

What this site collects

This is a personal portfolio. It collects as little as it can get away with, and nothing at all until you say so.

Analytics

If you accept cookies, this site loads Google Analytics. It tells me how many people visit, which pages they read, roughly where in the world they are, and what brought them here — a search, a link, or a URL typed in by hand.

It does not tell me who you are. I see counts and countries, not names, and there is no way for me to work back from the data to a person.

If you decline, or if you have not answered yet, none of it loads. No script is fetched from Google, no request is made to them, and no cookie is set. That is the difference between this and the more common arrangement, where the tag loads on arrival and merely promises not to use what it gathers.

Cookies

Google Analytics sets two: `_ga` and `_ga_<id>`. They hold a randomly generated identifier so that two page views in the same visit are not counted as two visitors. They expire after two years, or sooner if you clear them.

Your answer to the cookie question is not stored in a cookie. It is kept in your browser's local storage, which means it stays on your device and is never sent to the server.

There are no advertising cookies, no embedded third-party players, and no social widgets. Nothing here follows you to another site.

Cloudflare

This site is served by Cloudflare, and Cloudflare Web Analytics is switched on for it. It counts page views, referrers and countries, and it is injected at their edge rather than by anything in this site's code.

It sets no cookies and builds no identifier, which is why it is not behind the consent question above — there is nothing stored on your device to ask about. It runs whether you accept or decline.

Cloudflare also sees the ordinary things any host sees in order to serve a page: your IP address, your browser's user agent, and which URL you asked for.

The contact form

If you write to me through the form, your name, email address and message are sent to my inbox through Resend, an email delivery service. They are used to reply to you and for nothing else.

The message is not stored in a database, because there is no database. It exists in my email and in Resend's delivery logs.

Emailing me directly does exactly the same thing with one fewer party involved, and is always an option.

What I never do

I do not sell anything to anybody, run advertising, build profiles, or share what little I have with third parties beyond the three services named above.

Your rights

Under UK GDPR you can ask what I hold about you, ask for it to be corrected or deleted, object to it being processed, and complain to the Information Commissioner's Office if you think I have got this wrong.

In practice, for anyone who has only read the site, the honest answer to the first of those is: an anonymous row in a visitor count. If you have written to me, it is that email.

The legal basis for analytics is your consent, which you gave by choosing Accept and can withdraw below at any time. The basis for replying to your message is my legitimate interest in answering people who write to me.

Change your mind

You have not been asked yet, or your choice has been cleared.

Who to ask

This site is run by Gonçalo Oliveira. Everything above is handled by me personally — there is no company behind it and no data team.

goncaloeugenio.15@hotmail.com

Last updated 2 September 2026

Gonçalo Oliveira
Privacy