Data • Privacy • Hosting Architecture

Privacy Policy

I keep the privacy side of this site simple on purpose. I would not be comfortable visiting somebody's portfolio and quietly being profiled by advertising networks, marketing trackers, or a pile of analytics scripts, so I do not run those here.

If information is processed at all, it should have a clear reason for being there: serving the website, keeping it secure, or troubleshooting something that is not working.

1. Hosting Architecture & Technical Processing

This website is self-hosted from an origin server in my private infrastructure, served publicly through Cloudflare.

When you load a page on this site, your request necessarily travels through:

  • Cloudflare's global DNS, TLS, CDN, and security proxy infrastructure
  • An encrypted Cloudflare Tunnel (cloudflared) connecting to my origin
  • The origin web server (Nginx on Linux) in an isolated network segment

To deliver web pages securely, mitigate automated denial-of-service attacks, and maintain server reliability, standard technical request data is processed by Cloudflare and the origin server. This includes:

  • Your public IP address
  • The requested URL path and HTTP method
  • Browser User-Agent header and referer
  • Request timestamp, response code, and bytes transferred
  • TLS handshake parameters and threat scoring metadata

This technical processing is required for basic web functionality and security. Server logs are used solely for diagnostic purposes, abuse prevention, and network troubleshooting.

2. What I Do Not Use

The website itself does not intentionally use:

  • Zero Advertising Trackers: No marketing pixels, retargeting tags, or advertising network beacons.
  • Zero Third-Party Behavioral Analytics: No Google Analytics, session recorders, heatmaps, or fingerprinting scripts.
  • Zero Tracking Cookies: The site does not set tracking, marketing, or advertising cookies.
  • Zero User Accounts or Profiling: There are no visitor accounts, registration forms, comment trackers, or newsletter subscriber lists.

I do not sell, rent, monetize, or trade visitor data, nor do I build advertising or marketing profiles from website traffic.

3. Self-Hosted Static Dependencies

To prevent third-party asset networks from collecting visitor metadata, all core stylesheets, webfonts, images, and visual assets are self-hosted directly from the origin server:

  • Bootstrap 5.3 CSS is locally vendored in assets/css/
  • All font files (woff2) are self-hosted in assets/fonts/
  • No external requests to fonts.googleapis.com or public script CDNs occur during normal page rendering

4. External Links

This website contains links to external platforms, primarily GitHub and LinkedIn. If you choose to follow a link to an external website, their respective privacy policies and data practices govern that interaction.

5. Contact

If you have questions about the technical operation or privacy practices of this website, you can reach me through my public profiles on GitHub or LinkedIn.