Privacy Policy

Last updated: 7 October 2026

Controller

Vishnu Roshan, Chennai, India
Email: vishnuroshan4@gmail.com

Summary

This is a personal portfolio. It sets no cookies and uses no browser storage of its own. It has no contact form and no tracking or advertising scripts. Third parties are contacted only when you choose to download the résumé or play a game, and only after you confirm a notice.

Hosting

The site runs on Cloudflare (Cloudflare, Inc., USA). To deliver pages and protect the site from attacks, Cloudflare processes your IP address and request data such as the requested URL, time, browser user agent and referrer. The legal basis is my legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework.

Cloudflare Web Analytics

This site uses Cloudflare Web Analytics. It counts page views without cookies or browser storage and, per Cloudflare, does not track visitors by IP address or fingerprinting. The legal basis is my legitimate interest in knowing how often pages are read (Art. 6(1)(f) GDPR).

Résumé download and Cloudflare Turnstile

The résumé download is protected by Cloudflare Turnstile, a bot check. It loads only after you click “Résumé” and then “Continue”. Turnstile reads information from your browser and device and sends it, with your IP address, to Cloudflare in the USA. My server also passes your IP address to Cloudflare to verify the check. Nothing is stored by me.

The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Consent applies to the current page view only. If you do not click “Continue”, nothing is loaded. You can ask for the résumé by email instead.

Games (Internet Archive)

The DOOM and Wolfenstein 3D buttons embed games hosted by the Internet Archive (archive.org, USA). The embed loads only after you click a game and then “Continue”. The Internet Archive then receives your IP address and browser data and may set cookies under its own terms.

The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). The transfer to the USA is based on your consent (Art. 49(1)(a) GDPR). The USA may not offer a level of data protection equal to the EU for organisations that are not certified under the EU-U.S. Data Privacy Framework.

Email

If you email me, I process your address and message to reply. My email is hosted by Google (Gmail). The legal basis is steps before a possible contract, such as a job application (Art. 6(1)(b) GDPR), or my legitimate interest in answering you (Art. 6(1)(f) GDPR). I delete correspondence when it is no longer needed, or earlier on request.

External links

Links to GitHub, LinkedIn and project sites are plain links. Nothing is sent to those sites until you click one.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Email me to use these rights. You can also complain to a data protection supervisory authority, in particular in the EU member state where you live (Art. 77).