Skip to content

Privacy Policy

Effective date: 1 August 2026

This website, aleksihuusko.com, is operated by me, Aleksi Huusko, a private individual based in Helsinki, Finland. I am the data controller for the personal data described in this policy. This page explains what data the site collects, why, and what your rights are. The short version: I collect as little as possible, and I never sell your data.

What I collect and why

Contact form

When you use the contact form, you give me your name, email address, and message. The form is delivered to my inbox as an email through Resend, an email delivery service. It is not stored in a database on this site. I use it only to reply to you. The legal basis is my legitimate interest in responding to messages you send me and, where relevant, taking steps toward an agreement you have requested.

Newsletter

If you subscribe to my newsletter, your email address is stored in an audience list managed by Resend and used only to send you the newsletter. The legal basis is your consent, and you can withdraw it at any time using the unsubscribe link in every email or by contacting me.

Analytics

I use Vercel Analytics and Vercel Speed Insights to see how the site is used and how quickly it loads. Page views, referrers, country, browser, and device type. They work without cookies, do not track you across other sites, and do not build personal profiles; the data I see is aggregated and anonymized. The legal basis is my legitimate interest in understanding and improving the site.

PostHog

Only with your consent. If you accept analytics in the cookie banner, I also use PostHog to see how visitors move through the site: which pages are viewed, which links and buttons are clicked, how far down a page people scroll, and where they abandon a form. PostHog groups this into a visitor profile identified by a random ID stored in your browser. Not by your name, unless you give it to me yourself through a form. Your IP address is anonymized before it is stored. The legal basis is your consent, and you can withdraw it at any time.

Session recordings

With the same consent, PostHog also records a replay of your visit. The pages you see, your mouse movement, scrolling and clicks, along with browser console messages and page load timings. Anything you type into a form field is masked inside your browser before the recording is sent, so I cannot see what you entered, and the contents of network requests are not recorded. I use recordings only to find confusing layouts and broken flows. They are deleted automatically after 30 days.

Google Analytics and Google Ads

Only with your consent. If you accept, I also load Google Tag Manager, which runs Google Analytics 4 and Google Ads conversion tracking. Between them they record which pages you visit and whether you reached the site from one of my ads and then sent me a message, so I can tell whether advertising is worth paying for. Google sets cookies in your browser for this. Unlike PostHog, Google Analytics has no option to keep the data inside the EU, so it is processed by Google in the United States under the safeguards described below. The legal basis is your consent, nothing Google-related loads before you give it, and you can withdraw it at any time from the cookie settings in the footer.

Server logs

Like almost every website, the servers this site runs on (Vercel) process your IP address and standard request data in technical logs in order to serve the pages and keep the site secure. The legal basis is my legitimate interest in operating and securing the site.

Cookies

I never sell your data, and nothing is stored for analytics or advertising until you accept. Three kinds of storage are in use:

  • Strictly necessary. Your light or dark theme choice is remembered in your browser's local storage. It holds nothing but that preference, is never used to track you, and needs no consent.
  • Analytics, consent required. If you accept, PostHog stores a cookie named ph_phc_…_posthog along with matching entries in local storage. They hold a random visitor ID and session ID and last up to 12 months. Nothing is stored until you accept.
  • Advertising and measurement, consent required. If you accept, Google Analytics sets cookies named _ga and _ga_… to recognise a returning browser, and Google Ads sets _gcl_au to link an ad click to a message you later send me. They hold random identifiers, not your name. The _ga cookies last up to two years and _gcl_au lasts 90 days. Nothing is stored until you accept.

You are asked to choose the first time you visit. You can change or withdraw that choice at any time using the cookie settings link in the footer of every page, or by clearing this site's cookies in your browser. Vercel Analytics and Speed Insights need no cookies, so they run either way.

Who handles the data

I use a small number of service providers (processors) to run this site:

  • Vercel Inc. (USA) for hosting and analytics.
  • PostHog, Inc. (USA) for product analytics and session recordings, stored on PostHog's European infrastructure in Frankfurt, Germany.
  • Google Ireland Limited (Ireland), with processing by Google LLC (USA), for Google Analytics and Google Ads conversion measurement.
  • Resend Inc. (USA) for contact form email delivery and the newsletter list.
  • Sanity AS (Norway) for content management; the site's images and content are delivered through Sanity's CDN.

Where a provider processes data in the United States, the transfer is protected by the EU–U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses. PostHog's analytics data is held in the EU; the same safeguards cover the cases where PostHog staff outside the EU need access in order to support the service.

How long I keep data

  • Contact messages: kept in my email for as long as needed to handle our correspondence, then deleted.
  • Newsletter subscriptions: kept until you unsubscribe.
  • Vercel Analytics and Speed Insights: aggregated and anonymized. No data about identifiable individuals is retained.
  • PostHog session recordings: deleted automatically 30 days after they are made.
  • PostHog analytics events: kept for up to seven years, tied to a random ID with your IP address anonymized. Email me and I will delete yours sooner.
  • Google Analytics events: kept for 14 months, after which Google deletes them automatically. Google Ads keeps conversion records under its own retention policy.

Your rights

Under the EU General Data Protection Regulation (GDPR), you have the right to:

  • Access a copy of the data I hold about you
  • Correct inaccurate data
  • Have your data deleted
  • Restrict or object to processing
  • Receive your data in a portable format
  • Withdraw consent at any time

To use any of these rights, email me at contact@aleksihuusko.com. If you believe I have handled your data unlawfully, you can lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

Changes to this policy

If how the site handles data changes, for example, if I add new analytics or marketing tools, I will update this page and change the effective date at the top. Changes that require your consent will be asked for before they take effect.

Contact

Aleksi Huusko, Helsinki, Finland. Send me an email to contact@aleksihuusko.com.