Legal

Privacy Policy

Last updated: 14 August 2026 · Applies to pawin.dev

1. Who this is

Data controller: Pawin "Hero" Jirasuntornsiri, an individual based in Bangkok, Thailand, operating this personal portfolio site. There is no company, agency, or third party behind pawin.dev — it's one person's site.

Contact: hero@pawin.dev — for any question about this policy or your data, this is the only channel; there is no separate privacy team.

2. The short version

This site does not run advertising, does not sell data, does not use tracking cookies, and does not have user accounts or a database of visitors. It's a static set of files. The sections below list, exhaustively, the only ways any data moves when you visit.

3. What is actually collected

Source	What it collects	Why it's there
Google Fonts (fonts.googleapis.com / fonts.gstatic.com)	Your IP address and browser user-agent, to Google, when the page loads a web font	Renders the site's typefaces (JetBrains Mono, Space Grotesk)
Google Search Console	Aggregate, anonymized search performance data — which queries surfaced this site, impressions, clicks, average position, approximate country and device type	Lets the site owner see how the site performs in Google Search results
Browser `localStorage`	Your theme (dark/light) and language (EN/TH) choice, stored only on your device	Remembers your preference on your next visit — never transmitted anywhere
Hosting / CDN infrastructure	Standard web server access logs (IP, user-agent, timestamp, requested file) — typical of any static site host	Operational — abuse prevention, uptime, nothing analyzed at an individual level by the owner
The "hero@pawin.dev" mailto link	Whatever you choose to write, if you email	So you can actually reach me — there's no on-site form collecting this first
Google reCAPTCHA	Your IP address, browser/device signals, and interaction behavior, to Google, when you use the resume download button	Keeps automated bots from bulk-downloading the resume — runs invisibly, only shows a challenge if it flags something suspicious

Google Search Console, specifically: this is not a script embedded on the page — it's Google's own indexing/reporting tool, and the data it shows the site owner is search-performance analytics (how the site ranks and gets clicked in Google Search), not a log of individual visitors or anything tied to a person's identity. No per-visitor profile is built from it.

Google reCAPTCHA, specifically: this only loads when you interact with the resume download button. It's covered by Google's own Privacy Policy and Terms of Service, which apply to that interaction.

Nothing else runs. No analytics pixel, no ad network, no session-replay tool, no third-party embed beyond the ones listed above.

4. Cookies

This site does not set cookies. The theme/language preference uses localStorage, which is different from a cookie: it is never sent to any server, ever — it only lives in your browser and is readable only by this site.

5. Your rights

If you're in the EU/EEA or UK, the GDPR gives you rights over any personal data relating to you. Given how little this site collects, most of these will already be satisfied by the section above, but for completeness, you can:

Ask what's held — in practice, for most visitors, the honest answer is "nothing beyond standard server logs and Google's own aggregate search data."
Ask for correction or deletion of anything you did send me directly (e.g. by email).
Object to any processing, or withdraw consent where processing depends on it.
Lodge a complaint with your local data protection authority if you believe your rights have been violated.

Email hero@pawin.dev for any of the above — as a one-person site, I'll respond personally.

6. Data retention

There is no visitor database to retain data in. Server access logs (see §3) are retained only as long as the hosting provider's default policy holds them, typically a short rolling window, and are not exported or analyzed by the site owner. Emails you send are kept as long as any normal email correspondence would be.

7. International transfers

Google Fonts and Google Search Console are operated by Google, which processes data on infrastructure that may be located outside your country, including the United States. Google's standard contractual and compliance frameworks apply to that processing; this site does not add any transfer beyond what those services already do.

8. Children's privacy

This site is a personal portfolio and isn't directed at children, doesn't knowingly collect data from children, and has no mechanism to identify a visitor's age in the first place — there's simply no visitor data collection to identify anyone by.

9. Changes to this policy

If what this site collects ever changes (for example, if analytics were added), this page will be updated and the "Last updated" date at the top will change accordingly. Given the site's simplicity, changes should be rare and easy to spot by comparing dates.