This is a personal site with one page. I measure whether it works, which means whether the people who land here end up getting in touch. That is all the analytics are for.

What is collected

Two analytics tools run here, and neither one knows who you are.

PostHog records page views, how far you scrolled, how long you stayed, and clicks on links and buttons, including the visible text of whatever you clicked. Clicks on my contact links are counted separately so I can see which ones people actually use. Every event also carries the page address, where you arrived from, any campaign tags in the link, and your browser, operating system and device type. If a script on the page throws an error, the message and stack trace go to PostHog as well, which is how I find out the site is broken.

Vercel Web Analytics counts page views and stores a timestamp, the page, the referrer, an approximate location, and your browser, operating system and device type. It tells visits apart using a hash of the request, and Vercel throws that hash away after 24 hours.

Vercel also hosts the site, so its servers see your IP address and your browser on every request, the way any web server does. PostHog receives your IP for the same reason and uses it to work out roughly where in the world you are.

What is not collected

• The site writes nothing to your device. No cookies, no local storage, nothing at all, which is why you are not looking at a cookie banner.
• Your screen is never recorded. Session replay is switched off, and so are heatmaps and dead click tracking.
• Nothing you type into Spot leaves the conversation. Your question goes to the server that answers it and no further. The tracking library treats text boxes as sensitive and strips their contents before it builds an event, and I checked that by typing a distinctive phrase and then reading everything that left the browser.
• There is no profile of you. Nothing here logs you in, nothing gives you an ID, and no visitor record is created on either service. Every event is anonymous.
• No advertising, and no tracking of you across other sites. Nobody receives this data except the two companies named below, who hold it on my behalf.
• Nothing remembers you between visits. Since nothing is stored on your device, coming back tomorrow makes you a new visitor.

Where it goes

PostHog Inc. processes the analytics on my behalf, on PostHog Cloud in the United States. Vercel Inc. hosts the site and processes the Vercel Analytics data. Both publish their own lists of the companies they use in turn: PostHog and Vercel. How long PostHog keeps an event is set by its own retention policy for the plan this site runs on. I have not shortened it, and I would rather send you to their policy than quote a number I cannot stand behind.

Turning it off

If your browser sends Global Privacy Control, PostHog never starts up and your browser never contacts it at all. Do Not Track works a little differently. I get no events and nothing is stored on your device, but the error reporting script still loads, so PostHog sees your IP address for that one request. Both are a browser setting or a small extension. Vercel Analytics reads neither signal, so a content blocker is the way to stop that one.

Asking me about it

Write to aviv@avivkaplan.com. I am in Israel, so the Privacy Protection Law applies to me, and if you are in the EU the GDPR gives you rights over data about you. Because nothing here is tied to a person, there may be nothing of yours to find. Ask anyway and I will look and tell you what is there.

Last updated 2 August 2026. When what the site collects changes, this page changes with it. Back to the site