Website privacy
This notice covers lukekevinmclaughlin.com. The privacy policies for my apps are on the app privacy page.
Who is responsible
Luke Kevin McLaughlin, Munich, Germany, is the controller for personal data processed through this website.
Cookie-free visit statistics
To understand which pages are useful, this site keeps its own statistics without cookies or any storage on your device. For each request the server records the page, the time, the referring website or campaign tag, a device type and browser family taken from the user agent, and the region of your browser’s language setting. Instead of an IP address it stores an anonymous visitor code made from a random value that is deleted every day, a shortened IP address and the user agent, so visits cannot be linked across days or back to you. While a page is open, a small script reports how long the tab was visible, how far you scrolled and which external links you followed. Raw records are deleted after 90 days; only daily totals are kept, for up to 25 months. Automated visits (search engines and AI crawlers) are recorded by name. The legal basis is my legitimate interest in running and improving the site (Art. 6(1)(f) GDPR and UK GDPR). Keystrokes, form contents and screen content are not recorded by these statistics, and browser fingerprinting is not used.
Google Analytics and Microsoft Clarity
Google Analytics 4 (provided by Google Ireland Limited) gives a second view of the same visits, and what it receives depends on your choice in the cookie banner.
- No choice yet, outside the EEA, the UK and Switzerland: Google Analytics measures your visit from the first page, with its own cookies, on the basis of my legitimate interest (Art. 6(1)(f) GDPR); you can decline at any time.
- No choice yet, in the EEA, the UK or Switzerland: no Google Analytics cookies are set on your device. The server sends Google a cookie-free record of each page view, the time spent on the page, external links followed and whether a CV request was sent, with the page address and title, the referring website, device type, browser, operating system, browser language and the daily anonymous visitor code described above. No IP address and no form contents are sent. Google processes this data on my behalf; the legal basis is my legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR and UK GDPR).
- Accept: Google Analytics may also set cookies to measure visits, and Microsoft Clarity may load to show anonymised heatmaps and session replays with all form fields masked.
- Decline: nothing is sent to Google Analytics and Clarity never loads.
Google Signals and advertising features are off, and Google Analytics data is kept for 14 months. Google may process data in the United States under the EU–US Data Privacy Framework. You can change your choice at any time with the “Cookie settings” link in the footer.
CV requests
If you request my CV, the name, email address, organisation and message you enter are sent to me by email and stored so I can reply and keep track of the request. The legal basis is taking steps at your request (Art. 6(1)(b) GDPR). Requests are deleted after 24 months, or sooner if you ask.
Your rights
You can ask for access to, correction of or deletion of personal data about you, object to processing based on legitimate interests, and complain to a data protection authority. To make a request, use the contact form or message me on LinkedIn.