#privacy-policy

1. Overview

I build software with security as a first principle, and that starts with this site. This portfolio is a static website — no database, no user accounts, no server-side processing. I don't collect, store, or process your personal data unless you choose to contact me directly.

2. What This Site Does Not Do

• No analytics or tracking scripts (no Google Analytics, no Facebook Pixel, no third-party trackers).
• No cookies beyond the theme toggle stored in your browser's localStorage — this never leaves your device.
• No user accounts, logins, or authentication.
• No forms that submit data to a server. The contact section provides my email and phone — communication is initiated by you, through your own email client or phone.
• No ads, no affiliate links, no behavioral profiling.

3. Data You Choose to Share

If you email me at [email protected] or contact me by phone, you voluntarily provide whatever information is in your message. I use that information solely to respond to your inquiry and to discuss potential work. I never sell, share, or use your contact information for marketing.

4. Hosting & Infrastructure

This site is hosted on Cloudflare Pages. Cloudflare may process technical data like IP addresses and request logs as part of their CDN and DDoS protection services. Their processing is governed by Cloudflare's own privacy policy. I have configured strict security headers — HSTS with preload, a restrictive Content Security Policy, and frame denial — to protect every visitor.

5. Security Posture

Security isn't a checklist for me — it's how I build. This site enforces:

• HSTS preload — your browser is instructed to only connect over HTTPS, permanently.
• Content Security Policy — scripts and resources are restricted to trusted origins only.
• X-Frame-Options: DENY — prevents clickjacking attacks.
• Permissions-Policy — camera, microphone, and geolocation are explicitly disabled.
• No third-party scripts — nothing loads from external domains except Cloudflare's own CDN for DDoS protection.

6. Client Projects & Confidentiality

When I work with clients, any code, credentials, business data, or infrastructure access shared with me is treated as confidential. I use encrypted communication channels, isolate client environments, and never retain client data beyond the engagement unless explicitly agreed. My security-first approach extends to every project I touch.

7. Your Rights

Since this site collects virtually no personal data, there is little to access, correct, or delete. If you have emailed me and want your correspondence removed, send me a request and I'll handle it promptly. For any privacy questions or concerns: [email protected].