← Back to home

Privacy

What this page covers

This site is mostly static. Two forms collect personal information: the Request Resume form on the home page, and the Get new posts by email form on blog posts. This page describes what each one does with your data.

The site uses Vercel Web Analytics for aggregate, cookie-less traffic counts. No personally identifying data is collected by analytics.

Request Resume

Collected: name, email, optional company and note (up to 200 characters), plus your IP address and a Cloudflare Turnstile token to block automated submissions.

Why: each request is reviewed manually. If approved, a copy of the current resume PDF is emailed to you; if denied, nothing is sent and the request is deleted.

Where it lives:

  • Upstash Redis — pending request record until reviewed (auto-expires after 7 days).
  • Resend — notification and delivery emails.
  • Cloudflare Turnstile — human verification only; IP is not retained on this site.

Rate limit: 5 requests per email address per day. Addresses are SHA-256 hashed for the rate-limit key.

Blog subscribe

Collected: email address only.

Why: to send new blog posts by email. Submissions go to Buttondown, which handles confirmation and delivery. This site does not store your email after handing it off to Buttondown.

Buttondown uses double opt-in — you must confirm via a link in your inbox before receiving posts. Unsubscribe anytime via the link in any newsletter email.

Your choices

  • Skip the resume form and email me directly at rromanenco1@gmail.com.
  • To remove a pending resume request before it expires, email me at the same address with the email you used.
  • To stop blog emails, use the unsubscribe link in any newsletter from Buttondown.

Updates

If this page changes materially, the date at the top will be updated.