Site / Privacy
Privacy, in plain English.
This is a personal portfolio, not an advertising machine. It collects only what is needed to make the site work and to answer messages.
Who is responsible
Ciarán Paul Roche operates ciaranroche.com and is responsible for personal data submitted through it. Privacy questions and requests can be sent through the contact form; use “Privacy request” as the subject.
What is collected
If you use the contact form, the site stores your name, email address, optional subject and message. It also stores a one-way SHA-256 hash derived from the connection address so repeated automated submissions can be limited. The application does not store the raw address with the message.
Hosting and infrastructure providers may process ordinary network data—such as an IP address, browser details, request time and security events—to deliver and protect the site.
Why it is used
Contact data is used to read and reply to a message, manage any resulting conversation and protect the form from abuse. The usual legal basis is the legitimate interest in responding to a voluntary enquiry and keeping the service secure; where an enquiry concerns possible work, processing may also be necessary before entering a contract.
How long it is kept
Messages are kept only while needed to deal with the enquiry and reasonable follow-up. A record may be retained longer where necessary for security, accounting, legal claims or another legal obligation. Data that is no longer needed should be deleted or anonymised.
Who receives data
Messages are stored in a private owner-only inbox on the site’s hosting infrastructure. Personal data is not sold and is not used for advertising or a mailing list. Service providers receive data only as needed to host, secure or display the site.
- YouTube thumbnails load with the page; the privacy-enhanced YouTube player loads only after you choose Play.
- The public Bluesky feed is requested in your browser and may load media from Bluesky’s network.
- Some archival artwork is served by a legacy image host.
- The hosting platform and its infrastructure providers deliver the site and may keep operational or security logs.
Those providers may receive standard request data and may process it outside the EEA under their own terms and transfer safeguards.
Cookies and measurement
The portfolio code does not add advertising cookies, analytics trackers or tracking pixels. External services may use cookies or local storage when their content is requested, particularly after a video is played. Browser and hosting security features may also use essential storage.
Your rights
Depending on where you live, you may have rights to access, correct, erase, restrict or object to the use of your personal data, and to receive a portable copy. These rights are not absolute in every circumstance. Send a request through the contact form; identity may need to be verified before data is disclosed or changed.
People in Ireland and the EU may also complain to the Irish Data Protection Commission or their local supervisory authority.
Changes
This notice will be updated when the site’s data practices change. The revision date above shows the current version.