DATA MINIMISATION
Privacy
Privacy here is an architectural constraint rather than a notice. The simplest way to protect visitor data is to never collect it.
WHAT IS NOT COLLECTED
- No heatmaps and no session recording. The hosting platform records basic aggregate page analytics; this application adds none of its own.
- No advertising and no cross-site tracking scripts.
- No visitor accounts. Browsing this site never creates a record about you.
- No fingerprinting, no cross-site identifiers, no profile building.
WHAT IS STORED IN THE BROWSER
- A Recruiter Mode preference, so your chosen presentation persists between visits.
- A language preference, so your chosen language persists between visits.
- A flag recording that the boot animation has already been shown this session.
- For the administrator only: an authenticated session managed by the auth provider. These values stay on your device.
WHAT THE SERVER STORES
- Published portfolio content, which is public by design.
- One administrator account, held by the managed authentication provider.
- Audit records of administrative actions: timestamp, event type, affected resource, actor identifier. Metadata only, never content bodies or visitor data.
TERMINAL AND LAB DATA
- The assistant answers only from already-published portfolio content, never from private or administrative data.
- Your question is sent to this site’s own server to generate an answer. It is not stored and no conversation history is kept.
- Lab scenarios use fictional generated data and never touch real systems.
YOUR CONTROL
- Clearing site data in your browser removes every preference this site has stored.
- Because no visitor identity exists, there is no visitor profile to request or delete.
- Contact messages are retained for 90 days and are never shared or used for AI training. This page is updated whenever data handling changes.