Privacy & Cookies

Last updated: 31 August 2026

This is my personal site. I keep data collection to the minimum I need to run it, and nothing that isn't strictly necessary runs before you agree to it.

Who is responsible

Ilya Seliverstov, Toulouse, France, acting as the data controller for krezzoid.com, krezzoid.fr, seliverstov.fr. You can reach me at [email protected]. Publisher and hosting details are in the legal notice.

Analytics — only with your consent

I use Google Analytics 4 to see which pages people read. It is loaded only after you accept it in the cookie banner: until then no request is made to Google and no analytics cookie is set. The site also runs Google Consent Mode v2 with every storage type denied by default.

If you accept, Google Analytics sets the _ga and _ga_* cookies (up to 13 months) to tell repeat visits apart, and collects the page you viewed, an approximate location derived from a truncated IP address, and basic device and browser information. IP anonymisation is enabled. Data is processed by Google Ireland Limited and may be transferred outside the EU under the EU–US Data Privacy Framework. Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.

The AI assistant

The site has a chat assistant that answers questions about my background. Please do not send it anything confidential. When you send it a message:

  • The text of your message is sent to Anthropic (the Claude API) to generate an answer, together with a public summary of my CV. Anthropic processes it as my sub-processor and, under its commercial terms, does not use API inputs to train its models.
  • To enforce the limit of five questions per visitor per day, I store a SHA-256 hash of your IP address plus the current date in Cloudflare Workers KV, with the raw IP never written down. The entry expires automatically.
  • The conversation itself is kept in your own browser (local storage, key krezzoid-agent-chat) so it survives a page reload. It is discarded the next day, and clearing your browser data removes it immediately. It is never sent to me as a stored record.

Legal basis: performance of a service you asked for, and my legitimate interest in preventing abuse (Article 6(1)(b) and (f) GDPR).

Contact form

If you write to me, the name, email address and message you type — plus whether you asked for my CV — are delivered to my inbox through Resend. I keep the message for as long as the conversation is useful and do not add you to any mailing list. Legal basis: your request (Article 6(1)(b) GDPR).

Anti-spam and hosting

The contact form and the AI chat are protected by Cloudflare Turnstile, a privacy-focused alternative to CAPTCHA that checks you are not a bot. It does not track you across sites and does not profile you. The site is hosted on Cloudflare Pages, which processes connection data (including your IP address) to serve pages and block attacks. Both are strictly necessary to keep the site available, so they run without consent (Article 6(1)(f) GDPR).

What is stored on your device

  • krezzoid-cookie-consent (local storage) — your cookie choice, so you are not asked on every page. Re-asked after six months.
  • krezzoid-agent-chat (local storage) — the current day's AI chat, as described above.
  • Cloudflare Turnstile — short-lived tokens needed to complete the anti-bot check.
  • _ga, _ga_* (cookies) — Google Analytics. Only if you accept.

Changing your mind

You can change or withdraw your cookie choice at any time, and refusing is as easy as accepting.

Your rights

Under the GDPR you can ask for access to your data, correction, erasure, restriction or portability, and you can object to processing based on legitimate interest. Write to [email protected] and I will answer within one month. If you are not satisfied, you can lodge a complaint with the French data protection authority, the CNIL.

Changes

If I add a new tracker, the banner will ask you again rather than assume your previous answer still applies. The date at the top of this page shows the last revision.