Privacy Policy

Who I am

This website is operated by Chris McGee, a web developer and cybersecurity consultant based in Cumbria, United Kingdom. I am the data controller for personal data processed in connection with this site.

Contact: [email protected]

What data is collected and why

Analytics (Umami Cloud)

This site uses Umami, a privacy-focused analytics tool. When you visit a page the following data is sent to Umami's servers:

• Page URL and referrer
• Browser type and version
• Operating system
• Screen resolution
• Country (derived from your IP address; the IP itself is not stored)

No cookies are set. No persistent identifiers are placed on your device. No data is sold or shared with advertisers. Umami respects the browser's DNT signal — enabling it in your browser will prevent any data being sent.

Umami is operated by Umami Software Inc. and governed by their privacy policy.

Image delivery (Contentful CDN)

Images on blog posts and project pages are served via Contentful's content delivery network (images.ctfassets.net). When your browser loads an image, a standard HTTP request is made to Contentful's servers, which may log your IP address in accordance with their privacy notice.

External links

This site links to GitHub and LinkedIn. Following those links is entirely user-initiated and subject to each platform's own privacy policies.

International data transfers

Data processed by Umami Cloud and Contentful may be transferred to servers located outside the UK and European Economic Area (EEA), such as the United States. These transfers are safeguarded by recognised data protection mechanisms, such as the UK–US Data Bridge, the EU–US Data Privacy Framework, or Standard Contractual Clauses (SCCs).

Lawful basis

Analytics data is processed on the basis of legitimate interest (Article 6(1)(f) UK GDPR / EU GDPR) — specifically, understanding which content is most useful in order to improve the site. Given that no cookies are set, no persistent identifiers are used, and IP addresses are not retained, this processing is minimal and proportionate.

Data retention

Umami stores aggregated, anonymised page-view statistics. Because IP addresses are not retained, there is no individually identifiable data to delete. Analytics data is retained for as long as the site is active.

Your rights

Under UK GDPR and EU GDPR you have the right to:

• Access any personal data held about you
• Request correction or erasure of your data
• Object to processing based on legitimate interest
• Request restriction of processing
• Lodge a complaint with a supervisory authority

Because analytics data is anonymised and not linked to individuals, most of these rights cannot be practically exercised against aggregated statistics. To exercise any right or raise a concern, contact [email protected].

Exercising your Right to Object (opting out)

You have the right to object to processing based on legitimate interest. Because this site does not track you individually, the most effective way to exercise this right is technically: enable the Do Not Track (DNT) setting in your browser, or use a content-blocking extension (such as uBlock Origin). Our analytics script respects these signals and will not load.

Supervisory authority

If you are in the UK, you may contact the Information Commissioner's Office (ICO). If you are in the EU, contact your local data protection authority.