Privacy Policy.

Introduction

Your privacy is important to me. This policy explains what data is processed when you visit raka.design, the legal basis for that processing, and the rights you have under the EU General Data Protection Regulation (GDPR). As a personal portfolio, I keep data collection to a minimum.

Data Controller

The data controller responsible for this website is Raka Danuaji, based in Jakarta, Indonesia. For any privacy-related request you can reach me at rakadanuaji.id@gmail.com.

Information Collection

You do not need to provide any personal information to browse this website. Data is processed in two ways:

• Google Analytics (consent-based): If you accept analytics in the cookie banner, I use Google Analytics 4 to understand aggregated site traffic such as page views and device types. Google Analytics sets cookies and processes online identifiers (including your IP address) that may qualify as personal data. No analytics cookies are set and no data is sent to Google until you opt in.
• Server logs: Cloudflare (the hosting and CDN provider) may process standard request data, including IP addresses, for security, abuse prevention, and performance monitoring.

Cookies & Consent

By default this site sets no analytics or advertising cookies. Google Analytics runs through Google Consent Mode with all storage denied until you click Accept in the cookie banner. You can withdraw consent at any time by clearing this site's cookies and local storage in your browser, which will show the banner again. The site may use functional local storage (e.g. remembering your cookie choice), which is strictly necessary and exempt from prior consent.

Legal Basis for Processing

• Consent (GDPR Art. 6(1)(a)) for Google Analytics. You may withdraw it at any time.
• Legitimate interests (GDPR Art. 6(1)(f)) for security logging and keeping the site available and protected against abuse.

International Data Transfers

If you accept analytics, data may be transferred to and processed by Google in the United States. Such transfers rely on the EU–U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses as appropriate safeguards.

Data Retention

Google Analytics data is retained for up to 14 months and then automatically deleted. Cloudflare security logs are retained only for as long as needed for the purposes above, typically a short period.

Your Rights

If you are in the European Economic Area or the UK, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact me at rakadanuaji.id@gmail.com.

Third-Party Links

My portfolio contains links to external sites like LinkedIn and GitHub. I am not responsible for the privacy practices of those external platforms.

Contact

If you have any questions about this policy, feel free to reach out at rakadanuaji.id@gmail.com.