Privacy notice

This portfolio is run by DeVanté Johnson-Rose. This page sets out exactly what the site records about visitors, why, and for how long.

Nothing is recorded until you accept

The first time you sign in to the desktop, a banner asks whether you accept cookies and telemetry. Until you choose Accept, neither version of the site (v1 at / and v2 at /v2/) sends any records, and Google Analytics is not loaded.

What is recorded if you accept

Each record is one of these events:

• opening or closing an app, such as Word or Calculator
• signing in to or out of the desktop
• opening the Start menu, moving between folders in File Explorer, and moving a file to the Recycle Bin
• viewing a document, such as the CV in the PDF Reader
• running a command in the Terminal app. Only the name of the command is kept (for example ls), never anything typed after it

With each event, the record holds:

• the app it came from, and which version of the site you were using
• a random visit number, made by your browser and forgotten when you close the tab. It is not stored in a cookie and is not linked to you
• the name of your operating system and browser (for example Windows and Chrome) and your screen size
• a shortened IP address. The last part of an IPv4 address is replaced with zero, so 203.0.113.77 is stored as 203.0.113.0, and an IPv6 address keeps only its first 48 bits. That is enough to tell visits apart roughly, but not to identify your connection
• the date and time

The site does not store your full IP address, your location, your internet provider or your browser's full identifying string, and it never looks up where an IP address is.

To stop abuse, the server counts how often each address sends records, sends messages or tries to sign in to the Admin Console. While it counts, it keeps a scrambled, one-way form (a hash) of your full IP address. That is never stored with your records.

How long records and messages are kept

Records are deleted automatically once they are 90 days old. The copy of a message you send me (see If you send me a message) is deleted automatically once it is 12 months (365 days) old.

The clean-up runs at most once a day, the next time a visitor who has accepted uses the site or anyone sends me a message, so a record or a message can last a little longer than that.

Who sees them

Only me. Records are kept in the site's own database at its web host. At most once a day I receive one summary email with counts only: how many events and visits there were, which apps were used and which version of the site. It contains no IP addresses and nothing about any one visitor. The Admin Console shows the same totals, and only I can sign in to it.

Google Analytics (v1 only)

If you accept, v1 of the site loads Google Analytics (measurement ID G-64PRMY8EKD) from Google's servers, on that visit and on every later visit until you withdraw consent. Google Analytics sets its own cookies, named _ga and _ga_ followed by an ID, and sends Google details of your visit, such as the pages you view, your browser and device, and an approximate location that Google works out from your IP address. Google's privacy policy covers that data. v2 never loads Google Analytics, and neither version loads it if you decline.

Weather

The weather in the taskbar is always for one fixed place, Essex. Your IP address and location are never used for it, and nothing about you is sent to the weather service: the site's server asks Open-Meteo for the forecast for that one place and shows the same answer to every visitor.

If you send me a message

If you use the Outlook app to send me a message, I receive your email address, your subject, your message and any attachments by email. A copy of the message, without attachments, is kept in the site's database with a shortened IP address so that I can reply and deal with abuse. That copy is deleted automatically after 12 months, or sooner if you ask me.

Copilot

The Copilot app answers questions about my work and matches job descriptions against my CV. When you send it a question or a job description, the site's server passes it to Anthropic, whose Claude models write the answer, together with your last few messages in that chat and the site's own CV data. Nothing else about you goes with it: not your IP address, not a cookie and not a name. The site does not keep your questions, job descriptions or Copilot's answers; your chat stays in that window until you close it. To stop overuse, the server counts requests against a hashed copy of your shortened IP address and forgets each count within a day. Anthropic handles what it receives under its own privacy policy, so please do not paste anything private into Copilot.

What stays on your device

Your settings (such as theme and wallpaper), your answer to the cookie banner and any files you make on the desktop are saved in your browser's local storage, on your own device. They are not sent to the site, except where an event above mentions them, such as the name of a file you move to the Recycle Bin.

Other services your browser contacts

Some pictures load straight from other services, such as wallpapers from Unsplash and flags from flagcdn.com. Opening the Admin Console app loads Google's sign-in button and a chart library from jsDelivr. As with any website, those services receive your IP address and browser details when your browser fetches from them.

Changing your mind

Open Settings, go to System, and switch off Telemetry and cookies. Records stop at once. Google Analytics will not load on your next visit; to remove the cookies it has already set, clear this site's cookies in your browser. v1 and v2 each keep their own setting, so if you use both, switch it off in both.

Your rights

You can ask what the site holds about you, ask me to delete it, or object to it being kept, by emailing devante@johnson-rose.co.uk. Records are not linked to a name, so to find yours I may need the date, the time and the apps you used. You can also complain to the Information Commissioner's Office at ico.org.uk.

Last updated 7 November 2026.