Privacy policyPrivacy policy

The short version

This site has no accounts, no analytics, no ads and no tracking cookies. I only get personal data when you choose to share it: by asking the assistant, booking a call or emailing me. Like any website, the hosting also handles some technical data to send you the pages and keep them safe.

Who’s responsible

I’m Jonathan Rashi, a Design Engineer in Tel Aviv, Israel, and I run this site myself. For the data described here I’m the controller, the one who decides what happens to it. Write to me at jonathanrashi100@gmail.com about anything on this page.

What I get, and why

Visiting the site

When your browser asks for a page, the hosting provider, Vercel, receives your IP address, details about your browser and device, the page you asked for and the time. It needs them to send you the page and to protect the site from abuse, and keeps them for a short time under its own rules. I don’t use them to work out who you are.

The assistant

Ask about Jonathan sends your question, with up to the last eight messages of the conversation, to Google’s Gemini API, which writes the answer. That’s the only reason it’s sent.

• I don’t keep the conversation. It stays in your browser tab and is gone when you close or reload it.
• The assistant runs on Google’s free tier, under which Google may keep what you send and use it to improve its products, which includes people reading it. That’s why I ask you to leave out anything personal, about you or anyone else. Google’s terms also keep its free tier away from people in the European Economic Area, Switzerland and the UK, so the assistant doesn’t answer there: email me instead.
• To stop abuse, your IP address is kept as a counter for up to ten minutes, which allows ten questions in that time. The counter lives with Upstash, a database service, or in the server’s memory.
• If a request fails, the server notes that it failed, never what you asked.

Booking a call

Book a call opens Cal.com’s scheduler, or, while the scheduler isn’t set up, an email to me. If you book through Cal.com, the name, email, time and any notes you enter go to Cal.com and to me, so we can set up and hold the call. Cal.com’s script loads only once you press the button, it may set cookies of its own, and its privacy policy covers the scheduler.

Email

If you email me, I get your address and whatever you write, and I use them to reply and to keep track of our conversation. My email is hosted by Google.

Settings in your browser

The site keeps a few settings in your browser’s local storage. They never leave your device and I can’t see them:

• jr:intro remembers that you’ve seen the opening animation, so it doesn’t play again.
• jr:motion remembers that you paused motion.
• jr:sound remembers whether sound is on.
• jr:keys remembers whether keyboard shortcuts are on.
• jr:intercept-best keeps your best score in the map game.

You can clear them at any time in your browser’s settings. The site itself sets no cookies.

Things that load from elsewhere

GIFs from GIPHY, on the home page and in my notes, load from GIPHY’s servers, which receive your IP address and browser details, as any site that serves an image does. The fonts come from this site, not from Google Fonts. Links to other sites, such as LinkedIn or the products in my case studies, lead to pages with their own privacy policies.

What I’m listening to

The hero can show what I’m playing on Spotify, read from my own Last.fm account. That’s my data, not yours: your browser asks this site, this site asks Last.fm, and nothing about you goes along.

What I don’t do

I don’t sell, rent or trade personal data, use it for advertising, build profiles of visitors or make automated decisions about anyone. There are no analytics or tracking scripts on the site.

You don’t have to share anything

No law requires you to give me any of this, and you can read the whole site without it. If you’d rather not send a question to Google, skip the assistant and email me. If you’d rather not use Cal.com, email me and we’ll find a time.

Who else receives it

Only the services that run the site for me, each for the job described above:

• Vercel, which hosts the site.
• Google, which runs the assistant’s model and my email.
• Upstash, which keeps the assistant’s counters.
• Cal.com, which runs the scheduler, if you book through it.
• GIPHY, which serves the GIFs.

Beyond them, I’d only hand over personal data where the law requires it, or to make or defend a legal claim.

Most of these services are in the United States. I rely on their data protection terms when your data reaches them, as Israel’s rules on transferring data abroad and, for visitors in the EU or UK, the GDPR allow.

How long it’s kept

• The assistant’s conversation isn’t kept by me, and its counters last ten minutes.
• Hosting logs last as long as Vercel keeps them, which is a short time.
• Emails and booking details stay while we’re in touch. After that I keep them only as long as I need to for legal, tax or accounting reasons, or to deal with a claim, and then delete them.

The legal basis

For visitors in the EU or UK, where the GDPR asks for one: I use this data because you asked for something that needs it (an answer, a call, a reply), and because I have a legitimate interest in running a site that works and stays safe.

Your rights

Under Israel’s Privacy Protection Law you can ask to see the personal data I hold about you, and ask me to correct or delete it. In the EU or UK, the GDPR also lets you limit or object to how it’s used, take a copy with you, and withdraw any consent you gave.

Email me to use any of these. I may ask you to confirm it’s you, and I’ll answer within 30 days. If you think I got something wrong, please tell me first so I can fix it. You can also complain to Israel’s Privacy Protection Authority, or to the data protection authority where you live.

Keeping it safe

The site runs over HTTPS. The keys to the services above stay on the server and never reach your browser, and I keep as little as I can. No system is completely secure, so please don’t send anything sensitive through the site. If something does go wrong, I’ll do what the law requires.

Children

The site is for adults, about products and hiring. It isn’t meant for anyone under 18, and Google’s terms don’t allow the assistant to be used by them. If a child has sent me personal data, write to me and I’ll delete it.

Changes

When this policy changes, so does the date beside it. If a change matters, I’ll say so on this page.