Home · Privacy
Privacy notice
How this site handles personal data, cookies, and browser storage, written to meet the EU General Data Protection Regulation (GDPR) and the Irish rules on cookies.
Last updated 19 October 2026.
In short
- There are no accounts, forms, comments, or sign-ups on this site, so you never give me your name or email address here.
- Your progress through the lessons is kept only in your own browser, and is never sent anywhere.
- Google Analytics runs only if you accept it. If you decline, or never choose, nothing is sent to Google and no analytics cookies are set.
- GitHub, which hosts the site, logs visitors' IP addresses for security, as every web host does.
- Nothing is sold, and nothing is used for advertising.
Who is responsible for your data
The controller of personal data processed through this site is Brendan Kelly, an individual based in Ireland, who runs brendankellyai.github.io as a personal, non-commercial course.
For anything about your data, including the rights listed below, send me a message on LinkedIn (opens LinkedIn). That is the contact point for privacy requests.
As a small personal site, it is not required to appoint a data protection officer (Article 37 GDPR).
What is collected, why, and for how long
| What | Data | Why | Legal basis | Kept for |
|---|---|---|---|---|
| Hosting, by GitHub Pages | Your IP address, browser details, the page requested, and the time, in GitHub's server logs. | Delivering the site and keeping it secure. GitHub logs this for every visitor; the site owner cannot see or switch off these logs. | Legitimate interests (Article 6(1)(f) GDPR): a site cannot be served or protected without them. | As set out in GitHub's privacy statement. |
| Analytics, by Google Analytics 4, only if you accept | Pages viewed, the page that referred you, approximate location (city, region, country), device, browser and screen size, and a random identifier in a cookie. | Seeing which lessons are read, so the course can be improved. | Your consent (Article 6(1)(a) GDPR, and Regulation 5(3) of the ePrivacy Regulations, S.I. No. 336 of 2011). | 2 months in Google Analytics; the cookies themselves up to 2 years, unless you clear them or withdraw consent. |
| Lesson progress, in your browser only | Which lessons and slides you have viewed, and the last one you opened. | Letting you pick up where you left off, and showing your progress. | Stored on your device to provide the course features you are using (Regulation 5(5) of S.I. No. 336 of 2011). It never leaves your browser, so no one else can access it. | Until you clear your browser's site data. |
| Your analytics choice, in your browser only | Whether you accepted or declined analytics. | Remembering your choice, so the banner does not ask again on every page. | Strictly necessary to respect your choice (Regulation 5(5) of S.I. No. 336 of 2011). | Until you clear your browser's site data. |
| If you message me on LinkedIn | Your LinkedIn profile name and whatever you write. | Replying to you and, for a privacy request, dealing with it. LinkedIn also holds the message, under its own privacy policy. | Legitimate interests in answering correspondence (Article 6(1)(f) GDPR); for a rights request, the legal obligation to respond (Article 6(1)(c)). | As long as needed to deal with your message. I delete my copy of the conversation within 12 months of the last reply; you can delete yours in LinkedIn at any time. |
Cookies and browser storage
Cookies are set only after you accept analytics. Everything else is stored in your browser's local storage, which this site reads but never sends anywhere.
| Name | Type | Set by | Purpose | Lasts |
|---|---|---|---|---|
_ga | Cookie, analytics | Google Analytics, after you accept | Tells visits from the same browser apart. | 2 years |
_ga_FCWF98SQSH | Cookie, analytics | Google Analytics, after you accept | Keeps track of the current visit. | 2 years |
appliedai.consent | Local storage, strictly necessary | This site | Remembers whether you accepted or declined analytics. | Until cleared |
appliedai.lessons | Local storage, course features | This site | Remembers your progress through the lessons. | Until cleared |
Advertising cookies, ad personalisation, and Google signals are switched off. You can change your analytics choice at any time with Cookie settings at the foot of every page; declining removes the analytics cookies.
Clearing this site's data in your browser removes all of the above.
Who receives data
- GitHub (GitHub, Inc. and GitHub B.V.) hosts the site. See the GitHub General Privacy Statement.
- Google provides Google Analytics, as a processor acting on my instructions, and only if you accept. See how Google uses information from sites that use its services and the Google Privacy Policy.
- LinkedIn holds any message you send me there, as it does all LinkedIn messages. See the LinkedIn Privacy Policy.
- No one else. Your data is never sold, rented, or shared for advertising.
Transfers outside the EU
GitHub may process data in the United States. It states that it complies with the EU-U.S. Data Privacy Framework and generally relies on the European Commission's standard contractual clauses for transfers out of the EU.
Google Analytics collects data from EU visitors on servers in the EU and does not log or store EU visitors' IP addresses; it uses them only to work out an approximate location, then discards them. Google may process analytics data outside the EU, under safeguards recognised by the European Commission, such as standard contractual clauses.
Your rights
Under the GDPR you have the right to:
- access the personal data held about you (Article 15);
- have inaccurate data corrected (Article 16);
- have your data erased (Article 17);
- restrict how it is used (Article 18);
- receive it in a portable form (Article 20);
- object to processing based on legitimate interests (Article 21);
- withdraw your consent to analytics at any time, without affecting what happened before (Article 7(3)), with Cookie settings at the foot of any page.
To use any of these rights, send me a message on LinkedIn (opens LinkedIn). You will get a reply within one month, as the GDPR requires (Article 12(3)). There is no charge.
Analytics data is linked only to a random identifier in your browser's cookie, not to your name, so the quickest way to stop it and remove the cookies is to decline in Cookie settings.
Complaints
If you are unhappy with how your data is handled, please get in touch first. You also have the right to complain to the Data Protection Commission, Ireland's supervisory authority: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, or dataprotection.ie. You can instead complain to the authority in the EU country where you live or work.
Other things you should know
- No automated decisions. No decisions about you are made by automated means, and no profiles are built (Article 22).
- Not aimed at children. The course is written for working professionals.
- Other sites. Links to LinkedIn, GitHub, and other sites take you to services with their own privacy policies.
- Security. The site is static and served only over HTTPS. It has no database, and holds no personal data of its own.
- Changes. When this notice changes, the date at the top changes too.