What this site knows about you.

This is a personal portfolio run by Mattias De Ridder, based in Ghent — Belgium. It is not a business: nothing is sold here, no service is offered for payment, and there is no company, KBO/BCE number or VAT registration behind it. That is why there is no company registration block on this page — if that ever changes, this page gains one.

For anything here, including a request about your data, write to mattias.deridder [at] outlook.com. Under the GDPR that makes me the controller for the limited processing described below.

One thing, and it is not optional for anybody running a website:

• Server logs. Like every web server, the host records the request: IP address, timestamp, the page requested, browser and operating system. An IP address counts as personal data under the GDPR, which is the reason this page exists at all.

That is the whole list. There is no analytics product on this site — no page-view counting, no visitor measurement, no heatmaps, no A/B testing. I would quite like to know whether anyone plays the games; I would rather not process your data to find out.

There is no contact form and no newsletter. If you email me, that email sits in my mailbox like any other, and I keep it only as long as the conversation is useful.

Server logs exist to keep the site running and secure, and rest on legitimate interest (Article 6(1)(f) GDPR). There is no profiling, no advertising, no automated decision-making and nothing sold to anyone. Since nothing else is collected, there is nothing else to justify.

This site sets no cookies at all. You are not being asked to consent to anything because there is nothing to consent to, and a banner that existed only to look compliant would waste your time.

Three things are stored locally in your own browser, and never sent anywhere:

• theme — remembers light or dark, and is written only when you press the toggle yourself.
• The games keep their own progress, settings and high scores — a saved Sudoku grid, a Tetris theme. That data stays inside your browser.
• demo:mcp-todo-flow — anything you type into the MCP demo on that case study. It never leaves your device.

Under the ePrivacy rules this kind of storage is exempt from consent because it does only what you asked it to do. Clearing your browser storage removes all of it.

Vercel Inc. hosts the site and is my processor under a data processing agreement, which covers the server logs above. Vercel is a US company, so log data may be processed outside the EEA under the safeguards in that agreement.

That is the entire list — one processor. Fonts are served from this domain rather than from Google, there is no analytics vendor, no CDN for third-party scripts, no embedded video, no social widgets, and the fourteen games are self-hosted and sandboxed so they make no outside connections either.

Server logs are short-lived and held by the host for operational purposes only. Email stays until the conversation is over. Nothing else is retained, because nothing else is collected.

Under the GDPR you can ask for access to your data, correction, erasure, restriction or portability, and you can object to processing based on legitimate interest. Email me and I will deal with it.

One honest caveat: beyond short-lived server logs held by the host, I hold nothing about you at all — so there is usually no “your data” for me to produce or erase. That is a consequence of collecting nothing, not an evasion.

If you think I have this wrong, you can complain to the Belgian supervisory authority: Gegevensbeschermingsautoriteit / Autorité de protection des données, Drukpersstraat 35, 1000 Brussels.

The target is WCAG 2.2 level AA, which is the standard the European Accessibility Act points at. This site is a personal portfolio that sells nothing, so that Act almost certainly does not bind it — the commitment is here because it is the right target anyway, not because a regulator asked.

What is in place:

• Text and interface colours meet the AA contrast ratio in both light and dark themes.
• Every animation, including the 3D scenes, is skipped entirely when your system asks for reduced motion. The 3D also never loads on a phone, on a metered connection or on a machine without WebGL.
• Keyboard navigation throughout, a skip-to-content link, visible focus outlines, and alt text on images that carry meaning.
• Semantic headings, one h1 per page, and labelled landmarks.

Known limitations, stated rather than hidden: the games are embedded third-party-style canvases of my own making and most of them need a pointer or the arrow keys, so they are not fully operable by assistive technology. The architecture diagrams convey their meaning visually, and their text alternatives are summaries rather than full equivalents.

If something here blocks you, email mattias.deridder [at] outlook.com and tell me what broke. I will fix it or tell you honestly that I cannot.

Everything here is published in good faith and for information. Nothing on it is advice you should act on without checking, the case studies describe past work rather than promise future results, and I make no warranty that the site is available, complete or error-free.

Links point away to sites I do not control — GitHub, LinkedIn, Instagram, Etsy, Behance, Vimeo. What happens there is governed by their terms and their privacy policies, not mine.

The embedded games run in a sandboxed frame in your own browser and save their progress locally. They are hobby projects offered as-is.

Belgian law applies, and the courts of Ghent have jurisdiction, to the extent that any of this ever matters for a portfolio site.

The writing, design and code here are mine unless stated otherwise. Licences for the libraries, fonts and assets this site depends on are listed under attributions. Client and employer work shown here remains the property of those clients and employers, and work covered by a non-disclosure agreement is described only in the terms that agreement allows.