PRIVACY
what this site collects · where it goes · how to opt out
This site is a personal portfolio. The agent (Cicero) is here so you can actually talk to it instead of reading bullet points. To run it well I collect a small amount of anonymous usage data — listed in full below.
What I collect
- Page views and basic device info via Vercel Web Analytics — cookieless, GDPR-safe by design, aggregated.
- Page performance metrics (Core Web Vitals) via Vercel Speed Insights — cookieless.
- Heatmaps and session replay via Microsoft Clarity — clicks, scrolls, mouse paths. Input fields are masked by default; no keystrokes or form values are recorded.
- Anonymous product events via PostHog Cloud EU — page views and clicks (autocapture), plus these server-side events:
chat.message_sent— counts a message send. Captures:message_count(how many messages in the conversation) andchat_provider(anthropic / gemini / gateway). No message text is on this event — it carries your IP for coarse geo-lookup, so your words are kept off it deliberately.chat.response— fires when Cicero finishes a reply. Captures yourpromptand Cicero'sresponse, both truncated (to 2,000 and 4,000 characters). This event carries no IP address. I read these to see what people ask Cicero and to fix answers that are wrong or unclear. Not linked to your name, email, or IP, and never used for advertising.mcp.request— counts an MCP tool call. Captures:method(e.g.tools/call),tool_name(e.g.query_projects),user_agent(which MCP client). Tool arguments and results are never sent.
- Company-level visitor reveal via ipinfo.io — when you load a page, open the chat, or call the MCP endpoint, your IP address is looked up server-side to derive the organization that owns the network (a company or ISP), the network operator (
asn), and coarse location (city / region / country). That becomes a*.visitor_enrichedPostHog event, and if the organization matches one of my target companies I get a Slack ping in#portfolio-visits. It surfaces the company, never an individual — there is no person-level identity graph. Automated traffic (bots, crawlers, scrapers) is detected by user-agent and skipped. This replaces RB2B, which I dropped in early 2026; unlike RB2B it is not geo-gated, so it resolves organizations for visitors in any region.
What I do NOT collect
- Your full chat transcript — only your most recent message and Cicero's latest reply are retained per exchange (both truncated), never the entire conversation history.
- The contents of MCP tool calls or their responses.
- Any personal information beyond what the analytics tools above capture by default.
- Cookies for tracking or advertising. Vercel and PostHog can be configured with cookies for richer identity stitching; this site does not enable that.
- Any individual identity from the company reveal — ipinfo resolves the organization that owns your IP address, not who you are. There is no person-level identity graph, and I never learn your name or email unless you tell Cicero.
How to opt out
- Send
DNT: 1(Do Not Track) in your browser headers — Clarity and PostHog both honor this. Most browsers have a privacy setting to enable it. - Use a tracking blocker like uBlock Origin or Privacy Badger — both will block PostHog, Clarity, and Vercel Analytics by default.
- Use an MCP client without sending a User-Agent — the
mcp.requestevent will still fire (request counting) but the client identity won't be captured. - Route through a VPN or proxy— the company reveal is derived from your IP address and fires on page load (not just in chat), so a VPN is the reliable way to avoid it: ipinfo then resolves the VPN's network operator instead of your organization.
- Just read — if you never type in the chat or call the MCP endpoint, no message content is captured; page views and the IP-based company lookup still fire.
Why I'm capturing this at all
I'm job-hunting. This site is the surface I send to recruiters and hiring managers. The analytics tell me when the materials are working and when they aren't — without me having to guess. If a hiring manager at a specific company visits, I want to know. If the chat is unusable on mobile, I want to know that too. I also keep a truncated copy of chat exchanges so I can see what people actually ask Cicero and fix answers that are wrong or unclear — that feedback is too useful to throw away. I don't link those exchanges to your name or email, and I never sell or use them for advertising.
Where this data lives
- Vercel Web Analytics + Speed Insights: hosted by Vercel (US).
- Microsoft Clarity: hosted by Microsoft (US/global).
- PostHog: hosted in the EU (
eu.i.posthog.com). I picked the EU region deliberately. - ipinfo.io: hosted by ipinfo (US). Receives your IP address to return the org / location lookup; the result is stored in PostHog (EU).
Contact
Questions about anything on this page: hello@danielmicaletti.dev.
Last updated 2026-06-05. This page is intentionally short and plain-spoken — if it ever stops matching reality, the agent or this page is lying. Tell me if you spot it.