Privacy notice
Updated: 3 November 2026
This page explains how data may be processed when visiting my personal portfolio at hillol.de.
Person responsible
Hillol Sarker Jogesh
Dortmund, Germany
Contact: hjsarker@gmail.com
Website hosting
The portfolio is hosted through GitHub Pages (GitHub, Inc.). When you access pages or images, your browser connects to GitHub infrastructure. GitHub may process technical connection data, including IP addresses, to deliver the site and maintain security. GitHub's own privacy information applies to its processing.
Virtual Hillol chat
Virtual Hillol is an AI assistant based on my publicly shared professional background. It is not a direct conversation with me. The chatbot can answer questions about my experience, skills and projects, including comparisons with job descriptions.
When the AI service is available, questions, pasted job descriptions and recent chat messages are sent from your browser to a Vercel-hosted backend and then to OpenRouter for an AI-generated response. The backend uses my approved public career profile. Your messages are processed by these services to deliver replies, and technical information such as IP address and request metadata may also be processed. Their policies and retention practices apply: Vercel Privacy Policy and OpenRouter Privacy Policy.
I do not intentionally store individual chat transcripts in my own database. This does not mean that the hosting or AI providers retain no information; their processing and operational logs may have separate retention rules. If the AI connection is unavailable, the chatbot uses prepared answers locally in your browser and does not transmit the text of those questions to the AI backend.
Please do not paste confidential job descriptions, personal information about other people or other sensitive material into the chat. You can contact me directly at hjsarker@gmail.com instead.
Optional visitor email notifications
Visitor notifications are optional and disabled until I complete setup. If enabled, no notification request is sent unless you actively select “Allow visit notification” in the preference prompt. Refusing has no effect on your ability to access this website.
If you agree, your browser sends a short request to a Cloudflare Worker. Cloudflare can infer your full IP address, estimated city/region/country, and network owner from your network connection. We may also process the browser user-agent, page path, time, and referring website domain. That information may be forwarded through a protected Google Apps Script receiver to my Gmail address as a visitor notification.
The network owner does not necessarily represent your employer, and the location may be wrong or imprecise. No attempt is made to identify named individuals through this data.
Legal basis: your optional consent under Article 6(1)(a) GDPR and, where applicable, § 25 TDDDG. Declining means no optional visit notification is sent. The notification service does not use marketing pixels or advertising cookies.
To remember your selection, the website stores a small preference value in your browser's local storage. After consent, it also stores a session-only notification flag to avoid sending repeat alerts from refreshes. Those values stay in your browser and do not contain your IP address.
How to change your choice
When optional visitor notifications are enabled, use the “Privacy choices” control in the portfolio footer to withdraw consent or change your decision. You can also clear the website's local storage in your browser settings. Withdrawing consent stops future notifications; it does not automatically delete older emails.
Retention and recipients
Consent-based alerts are intended only for short-term interest in portfolio visits. I aim to delete visitor emails containing IP addresses within 30 days, subject to setup of an appropriate retention routine. Until then, deletion is manual. Data recipients for optional alerts are Cloudflare, Google Apps Script and Gmail. Their services may process data in countries outside the EEA. Appropriate transfer safeguards and their privacy terms should be reviewed before activation.
Other third-party connections
Some project preview thumbnails are requested from the public WordPress.com mShots screenshot service. Opening a project, GitHub or LinkedIn link will connect you to that external website. Your browser and those services may exchange standard technical request data, including your IP address, under those providers’ respective privacy terms.
Your rights
Subject to applicable legal conditions, you can request access, correction, erasure, restriction, portability, or object to processing. You can withdraw consent for optional visitor notifications at any time. For requests about this site, email hjsarker@gmail.com. You can also lodge a complaint with a data-protection supervisory authority.
This notice describes the planned technical implementation. The site's owner should review its completeness, international transfers, retention practice and any required legal imprint before enabling optional IP-address notifications.