What this site knows about you.
This is a personal portfolio run by one person. There are no accounts, no advertising, and nothing is sold or shared with anyone beyond the processors listed below.
Just reading the site
My host, Vercel, records ordinary server logs — your IP address, the page requested, the time, and your browser's user-agent string. These are operational records; I don't build profiles from them.
I use Google Analytics 4 to see which pages get read. It sets cookies and reports approximate location, device and browsing path. It is not used for advertising or remarketing. Browser “Do Not Track” and any content blocker will stop it, and nothing on this site breaks if you block it.
Using the “Ask Johannes” assistant
The assistant is a retrieval-augmented language model. When you send it a message, that message is transmitted to my server and then to the model providers listed below, which generate a reply from a stored copy of my CV and case studies.
Please don't type anything confidential into it. Treat it like a message to a stranger: it leaves your browser, is processed by third parties in the US, and is recorded in a diagnostic trace so I can debug bad answers.
Conversations are not linked to your identity and are not used to train anyone's models. Traces are kept while I'm actively improving the assistant and deleted when they stop being useful — in practice within a few months.
Booking a meeting
If you use the booking card, the name and email you type go to Google Calendar to create the event and send you the invitation. That's the only reason they're collected, and the only place they go. Cancelling the event removes them.
Who processes what
| Processor | Why | What of yours | Region |
|---|---|---|---|
| Vercel | Hosting and serverless functions | IP address and request metadata, in server logs | EU / US |
| Google Analytics 4 | Traffic analytics | Pages viewed, approximate location, device and browser | US |
| Vercel AI Gateway → OpenAI, Cohere | Runs the assistant's language and ranking models | The text of your message, and the passages retrieved to answer it | US |
| LangSmith (EU region) | Diagnostic tracing for the assistant | Your message, the retrieved passages and the reply, so failures can be debugged | EU |
| Supabase | Stores the assistant's searchable copy of my own CV and case studies | None of yours — my content only | EU |
| Google Calendar | Checks availability and creates the meeting | Only if you book: the name and email you type, and your chosen time | EU / US |
Your rights
Under the GDPR you can ask me for a copy of anything I hold about you, ask me to correct or delete it, or object to my processing it. Email schmid.johannes90@gmail.com and I'll act within 30 days. In practice, unless you've booked a meeting, there is very little to find — the assistant doesn't know who you are.
I'm the data controller: Johannes Schmid, Barcelona, Spain. If you think I've handled your data badly, you can complain to your national data protection authority.
Changes
This assistant is under active development, so this page will change as it does. The date at the top is the last revision. Material changes will be described here rather than made quietly.