Skip to content

Privacy

What this site does with data

This is a personal website. It processes very little personal data, sets no cookies, and runs no analytics or tracking.

Working draft — pending legal review. The wording below describes the site accurately but has not yet been reviewed by a qualified adviser.

Controller: Konstantinos Dorotheou, Limassol, Cyprus. Questions about this notice or your data: dorotheouk@gmail.com.

What is processed

Two things, both minimal

Your IP address

When you use the "Ask my CV" assistant, your IP address is used only to build a short-lived rate-limit counter, to prevent abuse and control cost. It is not linked to your identity, not used for tracking or profiling, and the counter expires within about one hour.

Your question to the assistant

The question you type is sent to Cloudflare Workers AI to generate an answer. The raw question is not stored: only a one-way hash of it is used as a cache key, and the generated answer is cached for up to 24 hours to avoid repeating the same request.

Nothing else is collected. No accounts, no forms that store data, no cookies, no analytics, no advertising or tracking pixels. The site uses one functional browser session flag for a visual effect; it holds no personal data and clears when you close the tab.

Who processes it

One provider

The site is hosted on Cloudflare (static hosting, edge storage, and the AI model that powers the assistant). The assistant model runs on Cloudflare's own infrastructure; questions are not sent to any separate third-party AI vendor. Cloudflare processes requests as a data processor and may keep short-lived operational logs at the platform level.

Legal basis: legitimate interests — running the site and preventing abuse of and excess cost on the assistant.

Retention and rights

How long, and what you can ask

  • Rate-limit counters keyed on IP expire within about one hour; the daily budget counter within about two days.
  • Cached assistant answers expire within 24 hours. Raw questions are never stored.
  • Under the GDPR and Cyprus data protection law you may request access, rectification, or erasure, and may object to processing. Given how little is kept, there is usually nothing to return.
  • You may complain to the Office of the Commissioner for Personal Data Protection (Cyprus).

Contact dorotheouk@gmail.com. Last updated 16 July 2026.