Skip to content
Andrew Popov

Privacy

This site is a personal portfolio. It is a set of static files with no accounts, no login, and no advertising. The only thing I ask you for is what you type into the contact form. Beyond that, my web host keeps ordinary server logs the way every web host does, which I get into below.

Analytics, the privacy-preserving kind

The site runs one piece of analytics: Umami. It counts page views without setting a cookie. To tell repeat visits apart within a day it derives a short-lived identifier from your IP address and browser, rotated daily and scoped to this site, so it can't recognize you across other sites or from one day to the next. It records the page you're on, the site you came from, your browser and device type, and a country derived from your IP address, which it does not store.

Umami keeps those page-view events, and I read them as totals: which writing people actually read, and where they found it. That's what I use it for, and it isn't enough for me to know who you are. Umami loads only on the live site, never on local or preview builds. It's hosted by Umami Cloud, so the data lives there as well as in my dashboard, under their privacy terms.

Everything else the site still doesn't do: no cookies, no tag manager, no session recording, no advertising or social pixels, no ad networks, and no third-party script other than Umami's. Umami's own data isn't used to track you across other sites. If any of that changes, this page changes first.

What the contact form collects

The form asks you for three things:

Two other fields ride along, and neither is about you. One names the form so my host knows which form was submitted. The other is a decoy input, hidden from anyone using the page normally: automated spam tends to fill in every field it finds, so a submission that fills that one in gets treated as spam. If you leave it alone, and a browser will, it goes out empty.

Submitting the form also sends the things any HTTP request sends, including your IP address and browser user agent. I don't do anything with those.

Please don't put anything sensitive in the message box. It is a contact form for a personal website, not a secure channel. If what you need to tell me is confidential, email me and say so, and we'll find a better way to talk.

Who processes it

The site is hosted by Netlify. Two things follow from that.

Contact form submissions go to Netlify Forms, which stores them and runs automated spam filtering over them. I read them there, and I reply from my own email, so once we're talking your message is sitting in my inbox too.

Separately, like any web host, Netlify processes standard server request logs when you load a page. That includes your IP address and browser user agent. I don't build anything on top of those logs and I don't use them to profile visitors. Netlify's handling of them is covered by their own privacy policy.

I do not sell anything to anyone, and I do not share what you send me with anyone, except where I am legally required to.

How long I keep it

I keep contact submissions for as long as the conversation is useful, and I clear out old ones at least once a year. If you write to me and I write back, the email thread lives in my inbox like any other email.

Getting it deleted

Email me at andrewvpopov@gmail.com and ask. Tell me roughly when you wrote and what address you used. I'll delete the submission from Netlify and the thread from my inbox, and I'll confirm when it's done. I can't reach into my host's own backups or logs, and I won't pretend otherwise.

Depending on where you live you may have a formal right to see what I hold, correct it, delete it, or object to my holding it at all. You don't need to cite a statute at me. Ask, and unless something legally obliges me to keep it, I'll do it.

My email address is public on purpose

andrewvpopov@gmail.com appears in the footer of every page, on the contact page, on my resume, and in this site's structured data. That is deliberate. The whole point of a portfolio is that people who want to hire me can reach me without filling in a form. The spam is a cost I've decided to pay.

Changes

If I change what the site collects, or add anything that watches what you do here more closely than Umami does, I'll say so on this page before or when it ships, not quietly afterward.

Last updated: July 10, 2026.