Privacy
This is a personal portfolio. It collects as little as possible — and no analytics at all until you say yes.
- 01No tracking without consent. Decline and Google Analytics is never loaded.
- 02No ad networks, no cross-site profiling, no data sold on.
- 03Your choice can be changed any time — on this page, or with ⌘K / Ctrl+K.
Controller
Lucas Bareis, Zürich, Switzerland
mail@lucasbareis.com
This website is a private portfolio with no commercial data processing. A designated data protection officer is not legally required; requests go straight to the address above.
Server logs
The site is hosted by SiteGround (SiteGround Spain S.L., Madrid, Spain) as processor, under a data processing agreement per Art. 28 GDPR. When a page is requested, SiteGround logs technically necessary data: IP address, date and time, the file requested, volume transferred, referrer, and browser and operating system details.
The purpose is secure, stable operation. Legal basis: legitimate interest (Art. 6(1)(f) GDPR, Art. 31 Swiss FADP). Logs are not merged with other sources and are normally deleted after 30 days.
Cookies & local storage
Four entries, nothing else:
lb-consent-v1Your cookie choice (local storage, kept until you change it)lb-toneDay or night mode (local storage)lb-langLanguage preference (local storage)_ga, _ga_TTZD8HX3BCGoogle Analytics — only after consent, stored up to 24 monthsThe three local-storage values never leave your device and only affect how the site is displayed. You can clear them any time in your browser settings.
Google Analytics 4
Provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Collected: pages viewed, time on page, truncated IP address, device type and country — anonymised and aggregated. Google Signals, advertising features and ad-related data sharing are switched off.
The script loads only after you accept in the banner (Google Consent Mode v2, everything denied by default). Legal basis: your consent, Art. 6(1)(a) GDPR. Any transfer to the USA (Google LLC) relies on the EU-U.S. Data Privacy Framework and standard contractual clauses.
Fonts
Typefaces are loaded from Google Fonts (fonts.googleapis.com, fonts.gstatic.com). Your IP address is transmitted to Google so the files can be delivered. Purpose: consistent typography; legal basis: legitimate interest (Art. 6(1)(f) GDPR). Google Fonts sets no cookies in this setup.
Getting in touch
If you send an email, I process the sender address, content and timestamp in order to reply (Art. 6(1)(b) or (f) GDPR).
The contact form runs through Formspree Inc. (USA) as a processor: name, email address and message are handled there and forwarded to me. Data is deleted once the enquiry is closed and no statutory retention duty applies.
External links
Linked services such as LinkedIn are outside my control; their own privacy terms apply. No data is transmitted until you click a link — there are no social plugins, iframes or like buttons embedded here.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Consent once given can be withdrawn at any time, without affecting the lawfulness of processing carried out beforehand.
A short email is enough: mail@lucasbareis.com. Complaints can be filed with the Swiss FDPIC or, in the EU, your competent supervisory authority.
Changes
If the technical setup of the site changes, this statement is updated. The version published here is the one that applies.