Last updated: 14 November 2026

This is a personal website run by Đặng Bá Tới (“I”, “me”). It covers the blog at www.toidang.xyz, the interactive CV at /r/cv and the small tools linked from them. I collect as little as I can, I do not sell or share your data with advertisers, and there are no ads or third-party tracking scripts on this site.

What I collect, and why

When you send a message through the contact form

  • What: the email address you enter, your message, and the page you sent it from.
  • Why: so I can read your message and reply.

When you subscribe to new posts

  • What: your email address.
  • Why: to email you when a new post is published. You can unsubscribe at any time with the link in every email.

Browser notifications (only if you turn them on)

  • What: the push address and keys your browser creates when you allow notifications. It does not contain your name or email.
  • Why: to send you a notification about a new post.
  • How long: until you turn notifications off on the site or in your browser settings.

Ask my CV (the chatbot on the CV page)

  • What: the questions you type are sent to an AI model on Cloudflare Workers AI to generate an answer.
  • Please do not type personal or confidential information into the chatbot.

Anonymous usage statistics

  • Cloudflare Web Analytics counts page views without cookies and without following you across other websites.
  • On-site events (for example “opened the chatbot” or “started the CV tour”) are recorded with the page path, the name of the site that linked you here (not the full address), mobile or desktop, your country as reported by Cloudflare (never your IP address), and campaign tags (utm_*) if you arrived through a tagged link. Each browser gets a random ID stored in local storage, replaced after 90 days; each tab gets a session ID that ends when the tab closes. This data is kept for about three months. Automated browsers and bots are not tracked.
  • Opting out: run localStorage.setItem('site-events-opt-out', '1') in your browser’s developer console on this site, or block local storage for it. Nothing breaks if you do.

Cookies and local storage

  • The site does not use advertising or cross-site tracking cookies.
  • If you open the CV from a link with utm_* campaign tags, those tags are saved in first-party cookies for 7 days so the visit can be attributed to that campaign.
  • Local storage keeps your preferences (such as light or dark theme), the anonymous IDs above and, if you use it, your chatbot conversation.
  • Cloudflare may set strictly necessary cookies to protect the site from abuse.

Services that process data for me

Everything runs on Cloudflare (hosting, databases, file storage, AI models, email delivery and spam protection). Cloudflare handles technical request data such as your IP address and browser type to deliver the site and protect it from attacks. Your IP address is used briefly to limit how often the chatbot and forms can be called; I do not store it in my databases. Cloudflare keeps short-lived technical request logs (a few days) that I only use to investigate errors. The contact and subscribe forms are protected by Cloudflare Turnstile, which checks that a visitor is human. See the Cloudflare Privacy Policy for how Cloudflare treats this data.

Links to other websites (GitHub, LinkedIn, YouTube and others) take you to services with their own privacy policies.

Your choices and rights

You can ask me to show, correct or delete the data I hold about you — a contact message or a newsletter subscription. Send the request through the contact form. You can unsubscribe from emails at any time with the link in every email.

Changes

If this policy changes, the date at the top of this page changes with it.