Skip to content
Privacy

What this site measures

I measure visits so I know whether anyone reads this and which parts are worth improving. There is no advertising and no profiling, and visit data is never sold or shared.

No analytics cookies, no tracking across sites

Analytics sets no cookies and stores nothing on your device. Nothing here follows you to other websites, and your visit is never combined with data from anywhere else.

A few things stay on your device, and only once you use them. Picking a language with the EN / فا switch sets a cookie named locale for one year, so the site opens in that language next time. Your theme choice is kept in your browser's storage, and an open chat with the assistant stays in this tab's session storage until you close the tab. None of this is used for analytics.

The only other cookies are mine: signing in to the private admin dashboard sets a session cookie and a marker that keeps my own browsing out of the numbers. Visitors never get either.

What is recorded

For each visit, the server records:

  • the pages you open, in order (for example, / then /projects)
  • active time on each page: time only counts while the tab is visible and you have scrolled, clicked, tapped or typed in the last minute
  • which sections of a page were on screen, and for how long
  • a few actions: asking the assistant a question (a suggested one or your own), sending the contact form, downloading the résumé, following a link to another site such as GitHub, LinkedIn or email, opening an image gallery or the command palette, and switching language
  • for each chat question, the topic its answer drew on and whether it was answered, never the text you typed
  • the referring site's hostname (for example, google.com), never the full URL or search terms
  • country, city and timezone, which Vercel derives from your connection; nothing is read from your device
  • device type (desktop, mobile or tablet) and browser family, from your browser's user-agent
  • the hour and weekday in your timezone
  • a pseudonymous visitor ID, explained below

How a visit is recognised

Pages opened less than 30 minutes apart count as one visit. To know that, the server keeps a short-lived pointer from your pseudonymous visitor ID to your current visit, which expires after 30 minutes without activity. It lives on the server, not on your device.

Your IP address is never stored

To distinguish visitors without identifying them, the server makes a one-way SHA-256 hash of your IP address and browser user-agent, combined with a secret salt. Only the hash is stored; the IP address itself is never stored, logged, or retained.

The salt changes each calendar month and expires with it. After that, even I cannot recompute the hashes or link visitors across months. The dashboard therefore reports visitors and returning visitors within the current month.

Retention

Each visit's record (the details above, without any IP address) is kept for 90 days. Daily and monthly totals are kept for at most 400 days. Both expire automatically.

Automated traffic

Crawlers, bots and automated browsers are filtered out before anything is recorded, so the counts reflect people rather than machines.

The assistant and the contact form

When you ask the assistant a question, the conversation is sent to the AI providers that generate the answer (Groq, Google Gemini and OpenRouter) and handled under their terms. This site doesn't store the text of your questions.

A message you send through the contact form, with the name and email you enter, is delivered to me through Telegram and isn't stored on this site.

Questions, or want your data removed?

Visit records carry no name, email or IP address, so I can't tell which one is yours. If you have a question, email me at sinaamareh0263@gmail.com