Privacy information

Last updated: 20 October 2026

1. Who is responsible?

Jie Huang, Germany, operates this personal portfolio for introductions and career-related conversations. For privacy requests, contact hi@jiehuang.de.

2. Visiting and securing the website

The portfolio is hosted through ChatGPT Sites, using OpenAI and Cloudflare infrastructure. Delivery, security and troubleshooting can involve IP addresses, request times, requested URLs, browser information and technical error data. The purpose is to provide a reliable website and prevent unauthorised access and abuse; the relevant legal basis is Article 6(1)(f) GDPR.

The website’s own code uses no advertising pixels or analytics service. Fonts and images are served as website assets. The page does not embed social feeds, remote video players or external font services. Opening a link to another website is subject to that provider’s practices.

3. Cookies and visit settings

Language, colour theme and conversation choices stay only in the open page. The website does not save these preferences or form drafts in cookies or local storage. Stored preferences from the retired memory feature are removed when the portfolio is opened.

A password-access session, when used, lasts up to 8 hours in the secure, HttpOnly, SameSite=Strict cookie __Host-portfolio. Cloudflare may use __cf_bm for bot protection, normally expiring after 30 minutes of inactivity. Necessary access and security functions rely on the exception for strictly necessary device access and Article 6(1)(f) GDPR.

4. Sending a message

The contact form collects your name, email address and message when you submit it. Validation checks formatting, not whether you own the mailbox. The website server forwards the submission over HTTPS to forms.jiehuang.de, hosted at Rainbow-Web.com, and sends it through the authenticated Rainbow Web mailbox to hi@jiehuang.de. Your address is used for replies. Incoming correspondence is also forwarded to the operator’s Gmail inbox, processed by Google.

Messages are used to respond to the inquiry and handle related correspondence. Depending on the request, the legal basis is Article 6(1)(b) GDPR for steps prior to a contract or Article 6(1)(f) GDPR for professional correspondence. Providing these details is voluntary; they are necessary to use the form and receive a reply. There is no mailing-list subscription or marketing signup.

When the mail service supports copies, a copy of your submitted message is automatically sent to the email address you entered. This does not subscribe you to future messages.

The “Open your email app” option prepares a draft in your own mail application. You send it there; selecting the option does not submit the draft to the website server. Your email provider then handles sending.

5. Recipients and international processing

These services can involve processing outside the European Economic Area.

6. Retention and abuse prevention

The form has no separate database of message contents. Messages that are sent remain in the mail systems and correspondence inboxes. Retention depends on whether the inquiry and follow-up are still needed and whether a legal retention duty applies. No automatic mailbox-deletion schedule has been configured.

To limit abuse, the sending interface holds keyed client identifiers, request digests, counters and submission status in a private file. These records contain no message body, email address or raw visitor IP address. Counters apply per hour; duplicate detection applies for 10 minutes. Expired state is removed during subsequent submissions, so physical cleanup depends on further traffic. Provider access logs and backups have their own retention rules.

7. Your rights

Subject to the applicable legal conditions, you may request access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests, complain to a supervisory authority.

Send requests to hi@jiehuang.de. For a private operator in Bavaria, the Bavarian State Office for Data Protection Supervision is a relevant authority: BayLDA. No automated decision-making with legal or similarly significant effects is used.