</> Privacy Policy
How your data is handled
Last updated: 2026-05-13. This page describes what personal information portfolio1 collects, where it is sent, and what your rights are. portfolio1 is a personal portfolio website operated by Yahya Khaldy (Morocco).
1. Data we collect
Contact form: when you submit the form on the Contact section, we transmit your name, email address and message to the form provider.
ChatBot: messages you type into the AI ChatBot are transmitted to a third-party LLM provider (OpenAI/Groq, Anthropic Claude, or Google Gemini — depending on configuration). The ChatBot is stateless: no message is persisted on our server. Only your IP address is held in memory for a few minutes for rate limiting purposes (20 messages / 60 seconds).
We do not set any cookies and do not currently use analytics or tracking scripts.
2. Third-party processors
Formspree (United States) — receives and forwards contact form submissions. See Formspree privacy policy.
LLM providers — depending on configuration, ChatBot messages are sent to OpenAI/Groq, Anthropic, or Google Gemini, all based in the United States. Your messages are not retained beyond the API call.
Vercel — the website is hosted on Vercel (United States). Vercel may collect basic access logs (IP, user agent, request path) for operational and security purposes.
3. Your rights (GDPR)
If you are located in the EU/EEA, the GDPR gives you the right to access, rectify, or erase your personal data, restrict or object to processing, and data portability. To exercise these rights, write to yahyakhaldy1@gmail.com.
4. Retention
Contact-form messages are retained in the Formspree inbox until manually deleted. ChatBot messages are not stored. Server logs are kept for up to 30 days.
5. Contact
Yahya Khaldy — yahyakhaldy1@gmail.com