Privacy & Data Processing Disclosure

When you complete and submit the inquiry form on the Work With Me page, only the information you deliberately provide is gathered:

• Contact Credentials: Your full name and corporate/work email.
• Organizational Context: Company or project name and optional links to supporting materials.
• Technical Context: The core engineering problem, current system state, and desired outcome or deliverable.
• Constraints: Expected timeline and optional budget context.

Purpose: This information is processed exclusively to qualify engineering challenges, evaluate architectural alignment, and formulate a technical response. Information is never used for advertising, newsletter marketing, behavioral profiling, or third-party syndication.

Storage Architecture: The website operates with no inquiry database. Upon successful submission, inquiries are dispatched via secure server notification directly to the operator's private mailbox. No copy of the message body is archived on the web server disk.

To protect server infrastructure from automated bot traffic and spam, Cloudflare Turnstile (Managed Mode) is integrated alongside server-side verification.

Turnstile confirms legitimate human interaction without setting third-party tracking cookies across websites and without requiring interactive image-labeling puzzles.

This site is configured for Plausible Analytics exclusively in production environments. Analytics scripts are completely disabled in development, preview, and local test builds.

Plausible operates under privacy-by-design standards:

• No cookies are used (cookie-less architecture).
• No persistent user or device identifiers are generated.
• No Personally Identifiable Information (PII) is gathered.
• Inquiry form messages, names, and email addresses are strictly never sent to analytics.

To prevent denial-of-service abuse and mail server flooding, the inquiry endpoint implements a privacy-preserving rate limiter.

Visitor IP addresses are never stored in raw plaintext. Requests are tallied against a one-way HMAC-SHA256 digest keyed with a secret server salt. Temporary rate-limit tokens are automatically purged after the rolling 60-minute window expires.

Standard HTTP web server access logs are retained at the hosting infrastructure level strictly for technical diagnostics and security audits.

For inquiries regarding these data practices or technical disclosures, please initiate contact via the Work With Me inquiry form, noting your privacy topic in the problem description.