Skip to main content

Legal

Privacy &
Cookie Policy

Last updated: July 2026

Overview

This is the personal portfolio of Neelaka Ganegoda. This page explains what data this site collects, why, and how you can control it. The short version: this site collects very little, shares nothing with advertisers, and gives you full control over what is stored in your browser.

Data collected

This site does not run a database, does not create user accounts, and does not sell data.

The only data stored is in your own browser via localStorage:

  • theme — your light or dark mode preference. Stored so the page loads in the right mode on your next visit.
  • cookie-consent — your response to the cookie banner (all, essential, or declined). Stored so the banner does not reappear.

Both values live entirely in your browser. They are never transmitted to a server.

Cookies & local storage

This site uses localStorage rather than HTTP cookies for preference storage. The distinction: localStorage data stays on your device and is never sent with HTTP requests. It is scoped to this domain and you can clear it at any time through your browser settings.

Essential storage

The theme and cookie-consent entries are considered essential because they exist solely to serve your stated preferences. They require no consent under ePrivacy rules, but we ask anyway so you are aware they exist.

Clearing stored data

You can remove all stored data at any time from your browser's developer tools under Application → Local Storage → this domain. Or run this in the browser console:

localStorage.clear()

Analytics

Google Analytics 4

This site uses Google Analytics 4 to understand which pages and projects get the most interest. It only loads if you select Accept all on the cookie banner. Choosing Essential only or Decline prevents the script from running entirely — no data is sent to Google in those cases.

This site uses Google's Consent Mode v2, which means analytics is blocked by default and only enabled after you explicitly opt in.

When active, Google Analytics sets cookies such as _ga and _gid to distinguish visitors and track sessions across pages. These cookies are governed by Google's Privacy Policy.

What is collected

Page views, session duration, country-level location (not city or IP address), device type, and browser. No personally identifiable information is collected or stored.

When you use the on-site search, the terms you type are sent to Google Analytics as a search_query event, along with how many results matched and which result you open. This helps me understand what people look for so I can improve the site. Like all analytics here, search terms are only recorded if you select Accept all — choosing Essential only or Decline means nothing about your searches is sent. Please avoid typing personal or sensitive information into the search box.

Microsoft Clarity

This site also uses Microsoft Clarity, a product-analytics tool that records anonymised heatmaps and session replays. It helps me see where people click, how far they scroll, and where a layout trips them up, so I can improve the site's usability.

Clarity masks all text content and form inputs by default, so the words you type or read are not captured — only anonymised interaction patterns such as clicks, scrolls, mouse movement, and page navigation. It sets cookies such as _clck and _clsk to distinguish sessions. This data is governed by Microsoft's Privacy Statement.

Unlike Google Analytics, Clarity currently loads on every visit rather than waiting for a cookie-banner choice. You can block it by clearing this site's cookies and local storage, or by using your browser's tracking-protection settings.

Withdrawing consent

Clear cookie-consent from your browser's local storage and reload the page — the cookie banner will reappear and you can make a new choice. You can also opt out globally via Google's opt-out browser add-on.

Third parties

The Plus Jakarta Sans font is self-hosted and served directly from this site, so no font requests are made to Google or any other third party.

Aside from Google Analytics and Microsoft Clarity (both covered under Analytics above), no social media pixels, advertising networks, or affiliate trackers are present on this site.

Your rights

Because this site does not collect personal data server-side, there is no data stored about you that would require a formal deletion request. Everything is in your own browser and can be cleared by you directly at any time.

If you are in the EU/EEA and believe your rights under GDPR have not been respected, you have the right to lodge a complaint with your local supervisory authority.

Contact

If you have questions about this policy, reach out directly:

[email protected]

This policy may be updated occasionally. The date at the top of this page reflects the most recent revision.