Privacy

No advertising, no third-party embeds, and no cookies. What this site does collect, it collects because a form asked you for it — set out below in full.

What the entry form collects, and why

You are asked for an email address before the portfolio opens, and optionally a name. That is used for one thing: to tell me someone read it. There is no mailing list, and nothing is sent to you.

Alongside it, the page reports what your browser volunteers about the visit: which page you landed on, the referring URL, your user-agent string, browser language, time zone, screen size and window size, plus the time. That is the whole list. There is no analytics script, no tracking pixel, no fingerprinting, and nothing that follows you to another site.

Your answer is remembered in your browser's local storage so you are not asked again. It stays on your device, is not a cookie, is not sent anywhere, and clearing your site data removes it.

Downloading the resume reports the same set, so I know who took a copy. If you got past the entry form, that download is linked to the email you gave.

Being plain about the obvious: the entry form is a courtesy, not a lock. The pages behind it are ordinary public HTML, and anyone determined to read them without answering can.

What the contact form collects

Your name, your email address, and your message. Nothing else is asked for, and nothing is inferred.

One thing is derived alongside it: a salted SHA-256 hash of your IP address — never the address itself — which is what the rate limit counts against. It is held in memory for the length of the rate-limit window and never written to disk. The hash cannot be reversed to an address, and no readable form of it exists at any point.

Where it goes

All of it — messages, entry-form details, download notices — is emailed to one inbox, mine. This site has no database, so no copy is kept here: once the email is sent, nothing about you remains on the server. It is not shared, sold, or passed to anyone else. Server logs record that a submission happened; they do not record the message, your name, your email address, or your IP.

How long it is kept

For as long as the email sits in my inbox, which is a mailbox I read rather than a system with a retention policy. There is no automated deletion, and claiming otherwise would be inventing a schedule nothing enforces.

Having it deleted

Ask, and it goes. Send the request through the contact form — say you want your earlier message removed and roughly when you sent it. No account, no form to fill in, no waiting period.