Data Governance

Privacy Policy & Cookieless Architecture

Effective Date: September 2026 • Compliant with GDPR, ePrivacy, and CCPA

No Tracking Cookies. No Cross-Site Fingerprinting.

Simeilan (四美兰) operates on a strict privacy-by-design ethos. We do not set any tracking cookies, we do not employ third-party advertising pixels, and we never track individual user sessions across websites. Consequently, our site does not require a GDPR cookie consent banner.

1. Proprietary First-Party Visit Analytics

To understand overall site traffic and optimize our technical performance, this site utilizes a lightweight, proprietary beacon script connected directly to our own Cloudflare D1 serverless database.

When you load a page, our edge worker receives a minimal HTTP request containing:

Requested Path (e.g. /services, /projects)
Referring URL (where available, to gauge traffic sources)
Device Category (coarse classification: mobile, tablet, or desktop)
Country of Origin (derived solely from Cloudflare's CF-IPCountry header)
Timestamp of the visit

Important: Your raw IP address is NEVER written to or persisted in our database. Data is stored purely in aggregated statistical format.

2. Contact Form & Communication Inquiries

If you choose to submit an inquiry through our Contact Form, we collect the personal information you explicitly provide:

Your full name
Your work email address
Your selected service category and project description

Purpose of processing: This data is processed solely for the legitimate business purpose of responding to your inquiry, preparing technical discovery sessions, and executing mutual NDAs or client contracts.

Data retention: Contact submissions are securely stored in our private Cloudflare D1 database. We do not sell, license, or share your contact information with any marketing vendors or third-party platforms.

3. AI Chat Assistant & Processing

Our floating chat assistant allows visitors to query our portfolio and credentials. Questions submitted to the chat widget are processed via Google's Gemini API (server-to-server from a Cloudflare Worker).

The chat session is stateless. Questions and answers are recorded in our internal database solely for quality auditing and performance tuning. We advise users not to paste sensitive corporate credentials or personal secrets into the public chat widget.

4. Your Legal Rights Under GDPR / ePrivacy

Under the General Data Protection Regulation (GDPR), you possess rights including the right of access, rectification, erasure, and restriction of processing regarding any personal data submitted via our contact forms.

To exercise any of these rights, simply email our data officer at contact@simeilan.com. Requests are fulfilled within thirty days at zero cost.