Privacy Notice
aws-portfolio.janetxiushi.me: what data is collected, why, and your rights.
Who runs this site
This site is mine. I am Janet Xiu Shi, an AI Quality Evaluation Advisor and AI Educator, based in Ireland. I am the data controller, which means I am the one responsible for what happens to your data here. For any privacy question or request, use the contact form on this site. That form goes to janetxiushi.me rather than to this site, because 1 inbox handles enquiries from all my sites.
What is collected
2 things, and only 1 of them happens without you choosing it. First, the contact form: if you use it, I get what you type, which is your name, email address, organisation, LinkedIn URL if you add it, and your message. I use those details to read your enquiry and reply to it, and for nothing else (legitimate interest, GDPR Article 6(1)(f)). They are not sold, not shared for marketing, and not fed into any automated decision. Second, website analytics: this site uses Google Analytics 4, and only if you say yes to it. Until you choose, no analytics script loads, no analytics cookies are set, and nothing goes to Google. Analytics and advertising features are 2 separate choices, both off unless you turn them on, and saying no costs you nothing, because every page, every link and the contact form work exactly the same either way. If you say yes to analytics, Google Analytics sets 2 first-party cookies here, _ga and _ga_<property>, so it can tell a returning browser from a new one. Legal basis for both choices: your consent (GDPR Article 6(1)(a), and Regulation 5 of S.I. 336/2011). Google is a US company, so if you say yes, that data will most likely be processed in the United States. What covers that transfer is the EU-U.S. Data Privacy Framework: Google is self-certified under it, and the European Commission decided in 2023 that it gives your data adequate protection. That decision is in force today, and it has been challenged in court. The General Court upheld it on 3 September 2025 (Case T-553/23, Latombe v Commission), and an appeal is now with the Court of Justice (Case C-703/25 P), still undecided. If it were ever overturned, I would have to change how this works or stop using Google Analytics, and I would update this page. Separately from anything you choose, this site runs on AWS Amplify and is delivered through a content network, which needs your IP address and browser type to send you the page at all. Ordinary server logs may record your IP address, the time, and the page you asked for, for security and diagnostics, and I do not use them to build any picture of you. The 3 categories below set out what each choice covers. The fuller detail, including the exact location and device fields analytics collects, the different roles Google plays in this, and how to opt out at Google's own end, is in the janetxiushi.me privacy notice linked at the bottom of this page, which names this site in its scope and covers it too.
Necessary
Your light or dark preference, and a record of the choice you make here. No tracking, which is why there is no switch.
Analytics
Which pages you read, how you got here, and rough location and device details. Google is a US company, so this most likely goes to the United States, and some of it is shared with Google to improve Google's own products, never for ad targeting. Full detail in the privacy notice.
Advertising
If you are signed in to Google, this lets Google tell me an age band, gender, broad interests, built from what it already knows about you across your other devices. Off unless you turn it on.
Your choice is stored in your browser (localStorage key jxsConsentV2) so you are not asked again on every visit. Use the “Privacy choices” control, present on every page, to change or withdraw your choice at any time - this does not require clearing your browser data.
Data retention
Contact form enquiries are kept for as long as needed to respond to and resolve them, and are deleted or archived once no longer needed; they are not kept indefinitely. That is the same handling as enquiries sent through janetxiushi.me, because they all land in the same inbox. Analytics data tied to a device or an identifier is kept for up to 14 months, and the clock restarts when you come back, so it is 14 months from your last visit rather than your first. Come back inside that window and it starts again. Never come back, and it is deleted 14 months after your last visit. I am spelling that out rather than just saying 14 months, because for a returning reader those are 2 different things. 2 exceptions Google applies whatever I set: age, gender and interest data always expires after 2 months, and grouped reports, which hold nothing that identifies anyone, are not covered by the retention setting at all. The record of your own privacy choice is kept in your browser rather than by me, and it expires after 6 months, at which point you will be asked again.
Your rights
Under the GDPR you have rights of access, rectification, erasure, restriction, portability, and objection. To exercise any of them, use the contact form on this site. You can also change or withdraw your analytics and advertising choice at any time using the Privacy choices control, which is present on every page and takes effect straight away: the analytics cookies are deleted and nothing more is sent. Withdrawing does not undo what was already collected while you had said yes, so if you want that deleted too, ask me and I will treat it as an erasure request.
You also have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie, and you do not need to go through me first.
Other Janet Xiu Shi properties
maya.janetxiushi.me has its own separately maintained privacy notice. agents.janetxiushi.me does not have a separate notice of its own: it is covered by the janetxiushi.me notice linked below, the same fuller notice that covers this site too.