Privacy policy
Last updated: 30 September 2026
This website is my personal portfolio. I take your privacy seriously and process as little personal data as possible. This page explains what is processed, why, and what rights you have.
1. Who is responsible
The data controller is Henning Trillhus (private individual, Norway). You can reach me at henningtrillhus05@gmail.com or by phone on +47 405 21 390. The website is henningtrillhus.no.
2. The short version
- No cookies, no advertising, no analytics or tracking tools, and no profiling.
- Fonts, styles and scripts are served from this website, not from third parties.
- Personal data is only processed (a) if you send me a message, and (b) in the limited way described below when your browser loads the website and my project information.
3. What I process, and why
Contact form
Data: the name, email address and message you type, and your consent tick. The form service may also process technical data such as your IP address to deliver the message and to prevent spam.
Purpose: to read and reply to your message, for example about an internship, a job or a project.
Legal basis: your consent (GDPR Article 6(1)(a)), which you give by ticking the box and sending the form. You can withdraw your consent at any time by emailing me. Withdrawing does not affect processing that happened before.
Retention: I delete messages no later than 12 months after our last contact, unless a longer period is needed, for example during an ongoing recruitment process or because the law requires it. The form service Web3Forms keeps a copy of submissions for up to three years (or less, depending on the plan). If you ask, I will delete your submission there as well.
Email and phone
The website shows my email address and phone number so you can contact me directly. If you email, call or text me, I process your contact details (email address, phone number, name) and what you tell me in order to answer you. The legal basis is my legitimate interest in answering enquiries (Article 6(1)(f)). Retention is the same as for the contact form. Emails and texts go through my email and phone providers, which process them under their own terms.
Visiting the website (hosting)
The website is hosted by Vercel Inc. Like any web host, Vercel processes technical data when you load a page, such as your IP address, the page you requested, browser and device information and the time. This is needed to deliver the website securely and to prevent abuse. The legal basis is my legitimate interest in running a secure website (Article 6(1)(f)). I do not use this data to identify individual visitors.
Project information from GitHub
The list of projects, the project pages, the README texts and the source code shown for some projects are loaded directly by your browser from GitHub (api.github.com and raw.githubusercontent.com). GitHub therefore receives your IP address and technical data, in the same way as when you visit github.com. Some README files contain images hosted elsewhere (for example badges or screenshots), and those servers also receive your IP address when the image loads. The legal basis is my legitimate interest in presenting my work (Article 6(1)(f)).
Links to other websites
Links to GitHub, LinkedIn, live demos and other sites take you away from this website. Their own privacy policies apply from then on, and I am not responsible for them.
4. Storage in your browser
The website saves a few things in your browser's local storage: your chosen colour theme, your chosen language, a temporary copy of the GitHub project data (up to one hour) and README pages you opened (until you close the tab). This information stays on your device and is not sent to me. It is only used to make the website work the way you asked, never for tracking. Because it is purely functional, I do not use a cookie banner. You can clear it at any time in your browser settings.
5. Who receives data
I do not sell personal data. The following services take part in the processing:
- Web3Forms delivers contact form messages to me and acts as my data processor. It is operated from India and uses Amazon Web Services, Cloudflare and Hetzner as infrastructure. For spam protection, the IP address and email address of people who submit a form may be sent to the services CleanTalk and Akismet. See the Web3Forms privacy policy.
- Vercel Inc. hosts the website. See the Vercel privacy policy.
- GitHub (Microsoft) provides project information. See the GitHub privacy statement.
- Google (Gmail) is my email provider and receives the messages sent to me. See the Google privacy policy.
6. Transfers outside the EEA
Some of these providers are located in, or process data in, countries outside the EEA, such as the USA and India. According to the providers, such transfers rely on safeguards such as the EU–US Data Privacy Framework or the EU Standard Contractual Clauses. Please see each provider's privacy policy for details.
7. Your rights
Under the GDPR you have the right to:
- access the personal data I hold about you,
- have incorrect data corrected,
- have your data deleted,
- restrict the processing of your data,
- object to processing that is based on legitimate interest,
- receive your data in a portable format, and
- withdraw a consent you have given.
Email me to use any of these rights. I will reply within one month. If you believe your data is handled incorrectly, you can complain to the Norwegian Data Protection Authority, Datatilsynet.
8. Security
The website is served over HTTPS and the contact form sends data over an encrypted connection. Access to messages I receive is limited to me. No system is completely secure, so I cannot guarantee absolute security.
9. Content and liability
The content of this website is provided in good faith to present my skills and projects, without any guarantee that it is complete, correct or up to date. Some projects are labelled vibe-coded, meaning they were mostly written by an AI. They are shown as they are, without warranty. Each project belongs to its own repository, so please check the repository for its licence terms. Names and logos of other companies and products belong to their respective owners. © 2026 Henning Trillhus.
10. Changes
I may update this policy, for example if I add new features. The date at the top shows when it last changed.