What this site measures

• which pages you view, which parts of each page are on screen and for how long, and how far you scroll;
• clicks on links (including links within this site), on the CV, on the email address and on things that are not links, with the part of the page, the time since the page opened and whether a new tab was opened; downloads of the CV;
• copying (only whether an email address was copied and how long the selection was, never the text) and printing;
• the site you came from (only its address, not the page), your approximate location (country, region, city), browser, operating system, device type, screen size and language;
• the network a request came from (a company or an internet provider), and whether it came from a search engine, an AI crawler or another automated client (an uptime check, a chat app drawing a link preview, a hosting network).

The site runs on Cloudflare. The server logs every request (page, referring site, country and network, no IP address) in Cloudflare Workers Analytics Engine. A small script on the page reports views, clicks, copying, printing, scrolling and time back to this site. A random number, made for each page view and never saved in your browser, ties that view’s reports together. The server stores these reports in Analytics Engine too, with your browser, operating system, device type, approximate location and a visitor ID, and passes them on to Umami, an analytics service, together with your browser’s user agent and your IP address with the end cut off. CV downloads are recorded the same way by the server.

The visitor ID is how I see one visit move through the site. The server computes it from the shortened address and the user agent with a secret key, and it changes every day, so visits on different days can’t be linked and the ID can’t be turned back into an address. Umami makes its own visitor ID in a similar way, changing every month, and uses the shortened address to estimate your location. So I can follow a visit, and I can see the network it came from, for example a company or a university, but not who you are. Cloudflare, like any web host, sees your full IP address; it is not passed on and not kept in my statistics.

I get a short email about each notable visit and a daily summary of all visits (when, the site you came from, pages, time on each part, how far you scrolled, clicks and copying, country, network, device type; no visitor ID, city or browser), sent through Cloudflare to my mailbox, and delete them after three months.

If your browser sends Global Privacy Control or Do Not Track, nothing is sent to Umami and no visitor ID is made; only the server log without IP address or browser details is kept.

I, Jakub Dvořák (Prague), am responsible for this data, and the legal basis is my legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR). Cloudflare, Inc. and Umami Software, Inc. process it for me; both are US companies, and transfers rely on the EU-US Data Privacy Framework and the EU standard contractual clauses. Umami stores the data in the EU. Cloudflare deletes its log after three months, Umami after six. The email summaries are kept in my mailbox at Seznam.cz, a.s., a Czech company. Nothing is sold or used for advertising.

You can object to this at any time: turn on Global Privacy Control or Do Not Track, or email me and I will stop. You can also ask what I hold about you or ask me to delete it, although nothing here is tied to your name, so I may not be able to find it. You can complain to the Czech data protection authority (ÚOOÚ).

Contact: hi@kubadvorak.com