Last updated 28 August 2026
This is a personal portfolio run by Ying-Shiuan Chen. There is no account to create, no newsletter, no comment box and no form — nothing on this site asks you for your name, your email address or anything else about you. The only thing collected is anonymous usage statistics, and only if you say yes.
The site uses Google Analytics 4 to understand which projects people actually read. It is loaded through Google Tag Manager, and it starts in a denied state: until you press Accept, Google Consent Mode keeps analytics_storage off, so no analytics cookies are written and nothing is stored on your device.
While consent is denied, the tag still sends one cookieless ping per page. It carries no identifier and cannot be tied to you or to a previous visit — it tells Google only that a page was viewed and that consent was withheld. If you press Reject, that stays true permanently, and any analytics cookies already on your device are expired immediately rather than merely ignored.
If you accept, Google receives the page you viewed, a rough location derived from your IP address, and your browser and device type. IP addresses are not logged or stored by Google Analytics 4. No advertising or personalisation signals are enabled: ad_storage, ad_user_data and ad_personalization stay denied whatever you choose, so nothing here feeds ad targeting.
Withdrawing is the same two buttons as accepting, and takes the same one click. Use Cookie settings in the footer of any page, or the button below. Rejecting deletes the analytics cookies from your device there and then.
Your choice is stored on your own device and is never transmitted anywhere. It stands for the period listed at the end of this page, after which the bar asks again rather than treating a decision made once as permanent. You can also clear it yourself at any time by deleting site data for this domain in your browser.
Some requests leave your browser whatever you choose about analytics, because they are how the page is delivered at all. Each of these necessarily sees your IP address:
Outbound links — LinkedIn, GitHub, Medium, Vimeo — are ordinary links. Following one hands you to that site under its own privacy policy, and nothing about you is passed along by this one.
Under the GDPR and the revised Swiss FADP you can ask what is held about you, ask for it to be corrected or deleted, object to its processing, and complain to a supervisory authority. Because nothing here identifies you by name, an access or deletion request is usually answered fastest by rejecting analytics — which removes the identifier from your device — but write either way and it will be handled: ohis.yingshiuan@gmail.com.
For accepted analytics the legal basis is your consent, and it is the only basis relied on. There is no legitimate-interest fallback quietly doing the same work if you decline.
| Name | Purpose | Expires | Set |
|---|---|---|---|
_ga | Distinguishes one visitor from another so repeat visits are not counted as new people. | 2 years | Only after Accept |
_ga_XPJ7PBRN07 | Keeps the state of a single visit (session) for this property. | 2 years | Only after Accept |
analytics_consent | Remembers whether you accepted or rejected, so you are not asked on every page. Stored in localStorage, not sent to any server. | 6 months | After either choice |
Event data in Google Analytics is retained for 2 months, after which Google deletes it. Aggregate reports — visit counts and the like — are not affected by that deletion and are kept for as long as the property exists. Your stored consent choice lives on your own device for 6 months and is never transmitted anywhere.