Privacy
Privacy Policy
This is a personal portfolio site. The policy below explains, in plain language, what data it collects, why, for how long, and how you ask for it to be deleted.
Last updated: 31 October 2026
Who is responsible
Roger Papke, as an individual, is the controller of the data processed on this site. For anything privacy-related, use the same email address shown on the Contact page.
Contact form
When you submit the form, I receive the name, email and message you wrote. There is a single purpose: replying to you. The legal basis is your consent, given by sending the message, and the legitimate interest in answering someone who reaches out.
The message reaches me by email through a delivery service (Resend). I do not use this data for any mailing list, I do not sell or share it with third parties, and I make no automated decisions with it. I keep the email for as long as the conversation is relevant; after that, I delete it.
“Ask about me” agent
The site's agent sends your question to a third-party AI model (Google Gemini) to generate the answer. In other words, what you type there leaves this site. That is why the widget itself asks you not to write personal or sensitive information.
On screen, the history lives only in your browser's memory and disappears when you reload. A copy of the question and answer is emailed to me (via Resend) so I can see what people ask — it is not kept in a database that others can access. I keep that email for as long as it is useful, then delete it. The AI provider handles data according to its own policy.
Technical logs
To curb abuse, the server rate-limits requests per IP address. The IP is used for that check only, in memory, and is not stored alongside message content. Server error logs do not include what you wrote or your email address.
Cookies and analytics
This site uses Google Analytics (GA4) to measure page usage — how many visits, where they come from and what is read most. Measurement starts when you arrive, on the basis of a legitimate interest in knowing how the site is used, and a notice tells you so on your first visit; "Got it" only dismisses the notice. GA4 sets its own cookies (such as _ga) to tell returning visits apart, does not store your IP address, and Google handles the data under its own policy. You can switch measurement off entirely through the "Turn measurement off" link in the footer — from then on nothing is loaded or sent for the rest of that day. The choice stays in your browser only and lasts for the day: on another date measurement resumes and the notice appears again, and you can switch it off once more — or back on earlier through the same link. There are no advertising cookies, no social network pixel and no cross-site tracking. The other preferences kept in your browser are theme (light or dark) and language, and they stay on your device.
Hosting
The site is hosted on Vercel, which records its own infrastructure access data according to its policy.
Your rights
Under Brazil's LGPD you may request confirmation that I process your data, access to it, correction, anonymisation, portability or deletion, and you may withdraw consent. Just write to the email on the Contact page — I answer and comply.
Changes
If this policy changes, the update date above changes with it. The full history of changes is public in the site's repository.