Privacy Policy
Last updated: 28 August 2026.
This is the privacy policy for yanivhaliwa.com, a personal portfolio site operated by Yaniv Haliwa as an individual. It explains exactly what the site collects, why, where it goes and how long it is kept. The short version: the site has no analytics, no advertising, no tracking cookies and no third-party profiling.
What the site collects
Nothing at all, unless you use the contact form. Browsing yanivhaliwa.com sets no cookies, runs no analytics script, and builds no advertising or behavioural profile. There is no tag manager, no pixel and no session recording.
When you submit the contact form, three fields are collected because you typed them: your name, your email address and your message. These are used for one purpose — delivering your message to Yaniv and allowing him to reply. They are never sold, rented, published, or used for marketing.
How your message is handled
Form submissions are transmitted over HTTPS to a Cloudflare Pages Function and delivered by email through Resend (resend.com), a transactional email provider acting as a processor. Your name, email address and message pass through Resend in order to be delivered. Delivered messages then live in Yaniv's ordinary email mailbox and are retained for as long as the correspondence remains relevant, then deleted.
The site itself stores no database of submissions. There is no copy of your message on this website after it has been sent.
Infrastructure and logs
The site is hosted on Cloudflare Pages. Cloudflare processes requests as an infrastructure provider and maintains its own standard network and security logs, including IP addresses, for abuse prevention and DDoS protection. That processing is Cloudflare's, governed by Cloudflare's own privacy policy, and Yaniv does not maintain separate server access logs or analytics on top of it.
For abuse prevention, the contact endpoint applies a short-lived, in-memory rate-limit counter keyed by IP address. It exists only in the memory of an edge instance, is not written to disk, is not retained, and is not used to identify anyone.
Third parties
- Cloudflare — hosting, CDN and network security.
- Resend — transactional email delivery for contact form submissions.
- Google Fonts — the Inter webfont is loaded from fonts.googleapis.com, which means Google receives your IP address as part of serving that font file.
- Unsplash — some illustrative project images are served from images.unsplash.com.
- TryHackMe — public profile statistics are fetched server-side by this site. Your browser does not contact TryHackMe.
Your rights
If you have sent a message through the contact form and want it deleted, or want to know what is held, ask via the contact page and it will be actioned. Because the site keeps no database, this means deleting the corresponding email.
Depending on where you live you may have rights under the GDPR or similar law to access, correct, delete, or restrict processing of your personal data, and to complain to your local data protection authority.
Children
This site is not directed at children and does not knowingly collect data from anyone under 16.
Changes
If this policy changes, the "last updated" date above changes with it. There is no mailing list, so there is no change notification.
Contact
Questions about this policy: use the contact page.