Legals

Privacy Policy

This policy applies to juliaarena.design · Last updated: November 2026

The short version

This is a portfolio. It has no accounts, no forms, no newsletter and no advertising. The only extra thing it does is count visits with Google Analytics 4, and that happens only if you press “Accept” in the cookies notice. If you press “Reject” (or close the notice), nothing at all is loaded: no cookies, no requests to Google. You can change your mind whenever you want — see Your choices.

1. Who is responsible for your data

The site juliaarena.design is a personal portfolio owned and operated by Julia Arena (the “data controller” for the purposes of the GDPR and similar laws). For any question about this policy or about your data, write to juliaarena@hotmail.com.

2. What this site does not do

It does not ask you to create an account or log in.
It does not have contact forms, comments or a newsletter: contact happens by email or WhatsApp, which you start yourself.
It does not run advertising, and it does not build advertising profiles of you.
It does not sell or rent personal data to anyone.
It does not try to identify you by name from your visit.

3. What is collected, and only if you accept

If you accept, the site loads Google Analytics 4 (measurement ID G-MZLEM3X1YK), a web analytics service provided by Google. Analytics reports include things like:

which pages of the portfolio were viewed, and in what order;
an approximate location derived from your IP address (city, country);
technical information: browser and version, operating system, device type, screen size and language;
how you arrived at the site (for example, the referring page or a search engine);
anonymised identifiers stored in first-party cookies, used to tell one visitor apart from another.

None of this includes your name, your email address or other information that identifies you personally — Google prohibits sending personal data to Google Analytics, and this site never does it.

4. Cookies this site uses

If — and only if — you accept, Google Analytics 4 sets these first-party cookies in your browser (names and durations are the ones Google documents):

Cookie	Purpose	Expires
`_ga`	Used to distinguish users.	2 years
`_ga_<container-id>`	Used to persist session state.	2 years

Source: Google Analytics 4 — cookie usage on websites. The browser can shorten these lifetimes if you don't come back (Chrome caps first-party cookies at 400 days, Safari at 7 days).

Your decision about the notice is kept in your browser's local storage under the key ja-consent. That is not a cookie, it is never sent to any server, and it only remembers whether you accepted, rejected or closed the notice. Beyond that, this site sets no other cookies of its own.

5. Your choices and how to withdraw consent

You are always in control, and refusing costs you nothing: the whole portfolio works exactly the same.

Change your mind at any time: in the footer of the site, under “Legals”, click Cookie settings. The notice appears again and you can accept or reject.
Stop the analytics right now: install the official Google Analytics opt-out browser add-on (available for Chrome, Safari, Firefox and Microsoft Edge).
Erase what is stored: clear cookies and site data for juliaarena.design in your browser settings. That deletes the _ga cookies and the remembered choice.
Block cookies entirely: every browser lets you block or limit cookies; the portfolio keeps working normally.

6. Legal basis for the analytics

Where the GDPR or the UK GDPR apply, the legal basis is your consent (Article 6(1)(a)). Because the analytics only load after you press “Accept”, and because the site sends Google the Consent Mode v2 signals (analytics_storage stays denied until you accept; ad_storage, ad_user_data and ad_personalization stay denied always, since this site does not advertise), no analytics data is collected before your choice. You can withdraw consent whenever you want, as described above.

7. How long data is kept

Cookies: up to 2 years, or until you delete them in your browser.
Analytics data: Google Analytics keeps user-level and event-level data for the retention period configured in the property — the available options for a Google Analytics property are 2 or 14 months, after which the data is deleted automatically. See Google Analytics — Data retention.
Nothing else is stored: this site has no database of its own. The statistics exist only inside the Google Analytics property.

8. Who else is involved

Google (Google Ireland Limited / Google LLC) provides the analytics. For Analytics, Google acts as a service provider (data processor) on behalf of the site. Its handling of this data is described in the Google Privacy Policy and in How Google uses information from sites or apps that use our services.
GitHub hosts the site (GitHub Pages). Like any hosting provider, it may process technical data — including IP addresses — to deliver the site and protect it from abuse. See the GitHub General Privacy Statement.

Because Google and GitHub are global companies, your data may be processed on servers outside your country. Those transfers rely on the safeguards described in their respective privacy documents, linked above.

9. IP addresses

For visitors in the European Union, Switzerland or the United Kingdom, Google Analytics does not log or store IP addresses: the address is used only to derive coarse location (city, country) and is then immediately discarded. For visitors elsewhere, Google may process the IP address as described in the “How Google uses information…” page linked above.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or restrict the processing of your data, to receive it in a portable format, to object to processing, and to withdraw consent at any time. To exercise any of these rights, write to juliaarena@hotmail.com and your request will be answered within one month. If you believe your data has been mishandled, you can also complain to your local data protection authority.

11. Children

This portfolio is a professional website. It is not directed at children, and no data is knowingly collected from children.

12. Changes to this policy

If what the site does changes, this page changes with it: the date at the top always tells you when it was last updated.

Written to be read. Everything on this page describes what the site actually does — no more and no less. The technical details about cookies, data retention and IP handling come from Google's own documentation, which is linked throughout so you can check them yourself. Questions? Write to juliaarena@hotmail.com.