This page summarizes what information vancleem.com collects, how it is used, and how to exercise your rights. The site is operated by Grant Van Cleemput in Montréal, Canada, and is hosted on Vercel.
1. What gets collected
Server & infrastructure logs. The hosting provider (Vercel) records basic request metadata — IP address, user agent, timestamp, requested URL — for operational and security purposes.
Analytics. Google Analytics 4 records pageviews and aggregate session data to understand which pieces are read. Vercel Web Analytics runs in parallel without cookies. Neither service receives the contents of contact form submissions or résumé attempts.
Contact form. When you submit the form on the About page, the name, email, and message you provide are sent via Resend and stored in a Supabase database for follow-up and audit purposes.
Résumé access attempts. Each attempt at the résumé code gate is logged with a hashed IP, user agent, and outcome. Raw IPs are not stored. The log exists to detect abuse.
2. Cookies
Google Analytics sets cookies for session attribution. Vercel Web Analytics does not. No advertising, retargeting, or third-party marketing cookies are set.
3. Third parties
Data is processed by the following service providers, each under its own privacy terms:
- Vercel — hosting, edge logs, no-cookie web analytics
- Resend — transactional email delivery for the contact form
- Supabase — database storage of contact submissions and résumé attempt logs
- Google (Analytics) — pageview and session analytics
4. Your rights
Under Québec Law 25, Canadian PIPEDA, and (where applicable) the EU GDPR, you may request:
- access to the personal information held about you,
- correction of inaccurate data,
- deletion of your record,
- withdrawal of consent for further processing.
Requests are handled through the contact form on the About page. To verify identity before acting, you may be asked to confirm details from the original submission.
5. Retention
Contact submissions are kept while a conversation remains active, then archived. Résumé attempt logs are retained for a rolling 90-day window for abuse monitoring, then purged.
6. Children
This site is not directed at, and does not knowingly collect information from, individuals under 14 years of age.
7. Updates
This policy may be updated. The effective date below indicates the latest revision. Material changes will be reflected on this page.