Privacy policy

This policy explains what information is collected when you visit barati.tech and its subdomains (the “site”), why, and the choices you have. A subdomain with its own policy follows that policy instead.

Who is responsible

Max Barati is the controller of personal data processed through the site. You can reach me on LinkedIn.

What is collected

• Server logs. Like any web server, the hosting infrastructure records technical request data: IP address, browser and device type, the page requested, referring page, and time. It is used to deliver the site, keep it secure, and fix faults, and is kept for a limited period.
• Preferences on your device. The colour theme you pick is saved in your browser's local storage. It never leaves your device.
• Analytics. The site may use Google Analytics to understand how pages are used in aggregate: pages viewed, time on page, approximate location, device, and referral source. Google Analytics uses cookies and similar identifiers. IP addresses are not stored by Google Analytics 4.
• Advertising. The site uses Google AdSense to show ads. Google and its partners may use cookies, device identifiers, and IP address to serve, measure, and personalise ads and to prevent fraud.

I do not ask for, collect, or sell your name, email address, or other contact details through the site, and I don't knowingly collect sensitive data.

Google's use of data

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this site and to other sites. Google's use of advertising cookies enables it and its partners to serve ads to you based on those visits. Learn more in How Google uses information from sites that use its services and in Google's Privacy Policy.

Cookies & advertising

• Strictly necessary: the theme preference in local storage, set only when you pick a theme. It holds no personal data.
• Analytics (Google Analytics): cookies such as _ga and _ga_*, kept for up to two years, that count visits and tell returning browsers apart.
• Advertising (Google AdSense): cookies such as IDE, __gads, and __gpi, set by Google to serve, measure, and personalise ads, cap how often you see them, and detect fraud.

In the EEA, the UK, and Switzerland, analytics and advertising cookies are set only after you consent through the banner. Blocking cookies doesn't stop the site from working.

Legal bases (EEA, UK, Switzerland)

Server logs are processed on the basis of legitimate interest in running a secure, working site. Analytics and advertising cookies are used on the basis of your consent. Where you decline, Google may still serve non-personalised ads, which use cookies only for frequency capping, aggregated reporting, and fraud prevention, as permitted.

Your choices

• Turn off personalised ads in Google's My Ad Center, or opt out of many third-party vendors at aboutads.info (US) and youronlinechoices.eu (EU).
• Opt out of Google Analytics with the Google Analytics opt-out add-on.
• Block or delete cookies in your browser settings at any time.
• Reopen the consent banner to change a choice you made there.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict the use of your personal data, to object to its use, to data portability, and to withdraw consent at any time without affecting earlier processing. California residents may opt out of the “sale” or “sharing” of personal information for cross-context behavioural advertising; turning off personalised ads as above does this. To use any right, message me on LinkedIn. You may also complain to your local data protection authority.

International transfers

Google may process data in the United States and other countries. Such transfers rely on safeguards such as the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

Retention

Server logs are kept only as long as needed for security and troubleshooting. Analytics data is kept for up to 14 months. Retention of advertising data is set by Google under its own policies.

Children

The site is not directed at children under 13 (under 16 in the EEA), and I don't knowingly collect their personal data. If you believe a child has provided personal data, contact me and I will delete it.

Changes

I may update this policy as the site changes. The date above shows the latest revision.