Last updated: 30 September 2026
The short version. This site sets no cookies. A counter called Umami counts page views and clicks on my LinkedIn and email links. It stores no IP address and does not follow you across other websites. There are no ads here, and I don't sell visitor data.
This is the personal website of Mai-Lan Khong, based in Spain. I am responsible for it. For any question about your data, write to mailankhong.biz@gmail.com.
Hosting. Vercel, Inc. hosts this site. To send you a page, its servers receive your IP address and your browser details, and work out your city and country from the IP address. Vercel does this for me as a processor. The request logs I can see are kept for one hour.
The click counter. On every page except Done With You and Done For You, Umami Cloud counts which pages are viewed and how often "Connect on LinkedIn" and "Email me" are clicked. For each view or click it records the page, the site you came from, your browser, operating system, device type, screen size, language, and your approximate location (country, region, city). Umami uses your IP address to work out that location and does not store it. It sets no cookies. To count unique visitors, it makes a scrambled code from details such as your browser, with a key that changes at the start of every month. Umami Software, Inc. runs the counter for me as a processor. I chose its EU data region, and my plan keeps the data for 6 months.
Icons. Some pages load files from another server, which then receives your IP address: the icons on Home, Done With You and Done For You come from unpkg.com, an open source file service that runs on Cloudflare.
Links. Once you follow a link to LinkedIn, Frontal or another site, you are on their site, and what happens there is outside this page.
I receive your email address and what you write, and I use them only to reply. My address is a Gmail address, so Google holds my mailbox. I keep emails only while I need them for our conversation, and I delete yours if you ask, unless the law requires me to keep it.
I count views and clicks to see which pages and links work, the hosting logs keep the site running and safe, and the icons load from another server so the pages look as designed. Under the GDPR, that is my legitimate interest (Article 6(1)(f)): the counter uses no cookies, stores no IP address and keeps its data for 6 months. When you email me, I use your message to answer you.
Vercel, Umami, Cloudflare and Google are US companies. Vercel says it may process data outside your country, including in the United States, and it is certified under the EU-U.S. Data Privacy Framework. Umami's suppliers include US companies, and its data processing terms add the EU's standard contractual clauses when data leaves the EU.
You can ask me to see, correct or delete data about you, to limit its use, or object to it: write to mailankhong.biz@gmail.com. The counter keeps no IP address and no cookie, so I usually cannot tell which counts are yours. You can also complain to a data protection authority. In Spain, that is the Agencia Española de Protección de Datos (aepd.es).
When something here changes, I update this page and the date at the top.