PRIVACY POLICY

> TL;DR

This is a personal portfolio. I don't sell ads, I don't run retargeting, I don't share data with third parties for marketing. The site collects anonymous analytics via Vercel Web Analytics and Google Analytics — both are off until you opt in.

> who is responsible

This site is operated by Caspian Almerud ("I", "me"). For privacy questions, email caspian@houseofcaspian.com.

> what gets collected

There are only two places where any data leaves your browser:

• [1] vercel web analytics
  If you click Accept on the consent banner, the site loads Vercel Web Analytics. It does not set cookies, does not use fingerprinting, and does not track you across sites. It records aggregate page views, referrer, country, browser, and OS. Visitor identifiers are derived from a daily-rotating hash and cannot be used to re-identify you.
• [2] google analytics
  Also loaded on consent, the site uses Google Analytics 4 (measurement ID G-867LZG8YFJ). GA4 sets first-party cookies (_ga, _ga_*) to distinguish unique visitors and sessions. Data is processed by Google under its data-processing terms. IP addresses are anonymised. No advertising features or cross-site tracking are enabled.
• [3] contact form
  If you submit the contact form, the name, email, and message you write are sent to me by email so I can reply. That data is used only to respond to you and is kept for as long as the conversation is relevant. It is not added to any mailing list.

> cookies

Before you accept analytics, the site sets no tracking cookies. The only client-side storage used is a single entry in localStorage under the key consent.analytics.v1, which remembers whether you accepted or declined analytics. It's stored on your device only and is never transmitted.

If you accept, Google Analytics sets first-party cookies (_ga, _ga_*) that expire after up to 2 years. These are used to distinguish visitors and sessions. They are not used for advertising. You can revoke consent at any time via the banner or the button on this page, which stops new cookies from being set.

Third parties that you interact with through embedded content (for example YouTube videos on the /videos pages) may set their own cookies when their player loads. Those are governed by their own privacy policies.

> legal basis (GDPR)

• Analytics — consent (Art. 6(1)(a)). You choose; the default is off.
• Contact form — legitimate interest in replying to you, or performance of a pre-contractual request (Art. 6(1)(f) / 6(1)(b)).
• Server logs — hosting providers (Vercel) may keep short-lived request logs for security and reliability. This falls under their legitimate interest and their own privacy policy.

> your rights

Under the GDPR you have the right to access, correct, export, or delete any personal data I hold about you, and the right to withdraw consent at any time. To exercise any of these, email me.

You can also lodge a complaint with your national data protection authority (in Sweden: Integritetsskyddsmyndigheten, imy.se).

> change your mind

You can reopen the consent banner and switch your choice at any time:

> updates

If this policy changes in any material way, the "last updated" date at the top of this page will change and the consent banner will reappear so you can review your choice.