A minimal, first-party data approach.

Information collected

This portfolio uses first-party, privacy-conscious analytics to understand aggregate use of public pages and projects.

• Approved interaction types such as page, project, case-study, resume, and contact-link views.
• The local page path and, where relevant, a public project identifier.
• Coarse traffic-source, device, and browser categories.
• A random anonymous visitor identifier stored in a first-party cookie.

Information not collected for analytics

• Passwords, Owner usernames, MFA codes, session credentials, or CSRF tokens.
• Message or form content, because this site does not operate a public contact form.
• Full IP addresses, full referrer URLs, full user-agent strings, or arbitrary metadata.
• Advertising profiles or cross-site tracking data.

Security records

Restricted Owner authentication may create separate defensive security records, including a timestamp, source IP, login outcome, and summarized user agent. These records are not public and are used only to protect the Owner Console.

Default retention is up to 395 days for portfolio analytics and up to 90 days for security records. Operational retention may be shortened when data is no longer needed.

Cookies and external services

Public analytics uses an HttpOnly first-party visitor cookie. The restricted Owner Console uses separate secure session and CSRF cookies after successful authentication.

The Projects experience may load an interactive Spline visual from prod.spline.design and supporting modelling resources from unpkg.com. No third-party advertising or general-purpose analytics service is used.

Contact

Public contact links open your email application or LinkedIn. Email content is handled by the services you choose to use and is not stored by this website.

Questions about this notice or the handling of portfolio data may be sent to davhardt51@gmail.com.