ENGLISH
What happens to your data
Updated October 19, 2026
Site operator and contact
Haowei Cao operates this personal portfolio. For privacy questions or requests, contact the protected email on the contact page. Please describe the request without sending passwords, identity documents or other sensitive information.
Browser preferences and essential services
The site remembers language, appearance and generated page translations in browser local storage. Temporary navigation state uses session storage. You can remove these through your browser’s site-data settings. Cloudflare hosts and protects the site and may process IP addresses, request headers and security or operational data. Cloudflare Web Analytics may provide aggregate usage measurements. If human verification is enabled, Cloudflare Turnstile processes signals needed to check the request and the site may set a short-lived verification cookie. If a site experiment is enabled, an assignment cookie may remain for up to 30 days.
Asking Luna
Sending a question sends its text and language to this site’s server. The configured AI service receives the current question and relevant public résumé or project excerpts. Depending on configuration, this is NVIDIA’s API or Cloudflare Workers AI. A job description you submit may also be included; if you submit a public job-post URL, the server may fetch that page. Optional page translation sends the page’s public text to the configured translation service.
The assistant does not currently maintain a persistent conversation history. This does not mean every request is immediately deleted: question-and-answer responses may be cached for up to six hours. Diagnostic logs can include timing, provider, classification, message length, a message hash and, for rejected questions, up to 120 characters of the question. Hosting and model providers process requests under their own policies. Do not submit secrets, private contact details, confidential job descriptions or other sensitive data. AI answers can be wrong; use the résumé or contact Haowei to verify material details.
External links and scheduling
Links to GitHub, LinkedIn, publications, tools and Calendly take you to independent services. Opening a scheduling link uses Calendly’s own privacy practices; this page does not collect your appointment details. Their notices apply when you visit or submit data there.
Advertising and your choices
As of this update, the portfolio does not load AdSense advertising code. The domain may be verified for an AdSense application. If Google advertising is enabled later, third-party vendors, including Google, may use cookies to serve ads based on your earlier visits to this or other websites. Google’s advertising cookies allow Google and its partners to personalize ads based on those visits. You can manage or opt out of personalized Google ads in My Ad Center; other participating vendors offer choices at AboutAds. See Google’s advertising privacy information.
Applicable consent and privacy controls must be implemented before advertising is activated. This notice is not a consent form. We will update it if advertising, providers or data practices change.
Retention, requests and service policies
Local preferences remain until cleared or replaced. The six-hour application cache is separate from provider logging; infrastructure and provider retention follow their service configurations and policies, so we cannot promise immediate deletion from every provider. You may email a request for access, correction or deletion where applicable; the ability to identify a request depends on what data is retained. Read the Cloudflare privacy policy and NVIDIA privacy policy.