DATA MINIMISATION
Privacy
Privacy here is an architectural constraint rather than a notice. The simplest way to protect visitor data is to never collect it.
WHAT IS NOT COLLECTED
- No analytics, no page-view counters, no heatmaps, no session recording.
- No advertising, no third-party trackers, no social embeds, no external JavaScript.
- No visitor accounts. Browsing this site never creates a record about you.
- No fingerprinting, no cross-site identifiers, no profile building.
WHAT IS STORED IN THE BROWSER
- A Recruiter Mode preference, so your chosen presentation persists between visits.
- A language preference, so your chosen language persists between visits.
- A flag recording that the boot animation has already been shown this session.
- For the administrator only: an authenticated session managed by the auth provider. These values stay on your device.
WHAT THE SERVER STORES
- Published portfolio content, which is public by design.
- One administrator account, held by the managed authentication provider.
- Audit records of administrative actions: timestamp, event type, affected resource, actor identifier. Metadata only, never content bodies or visitor data.
TERMINAL AND LAB DATA
- The simulated terminal runs entirely in your browser against already-public content.
- Terminal input is not logged, not stored, and not sent anywhere for processing.
- Lab scenarios use fictional generated data and never touch real systems.
YOUR CONTROL
- Clearing site data in your browser removes every preference this site has stored.
- Because no visitor identity exists, there is no visitor profile to request or delete.
- Contact messages are retained for 90 days and are never shared or used for AI training. This page is updated whenever data handling changes.