Privacy
A small site with a small data footprint.
This portfolio does not require an account and does not sell personal information. External links—such as GitHub and LinkedIn—follow the privacy policies of those services.
No visitor analytics
This site does not use analytics, tracking pixels, advertising cookies, or browser storage to measure your activity. The hosting provider may process basic request information for security and reliable delivery, subject to its own privacy practices.
Local error diagnostics
If something fails, this page keeps a small error summary in memory to help diagnose it. It is not sent to a server or saved in browser storage, and it disappears when you reload or close the page.
Messages and spam prevention
If you use the contact form, your email address, message, and any name or subject you provide are stored in Supabase so I can read and respond. Messages are private, are not sold or used for marketing, and are automatically deleted after 180 days. You can email me to request earlier deletion.
The server uses keyed hashes of network addresses and sender emails to enforce sending limits. Raw network addresses are not saved in the contact database. These rate-limit records expire after two days of inactivity. This is used for abuse prevention, not visitor analytics.
Private inbox sign-in
The owner inbox uses GitHub to verify my identity and essential, secure cookies to keep me signed in for up to 12 hours. Visitors do not need an account or a sign-in cookie to send a message. Replies are sent from my email app and are subject to that email provider’s storage practices.
Contact
Questions can be sent to zachsm@alumni.stanford.edu.