Privacy
This site is a personal portfolio and a small set of self-built apps. There is no advertising, no sale or sharing of personal data, and nothing is collected beyond what each feature below needs in order to work.
Signing in with Google
Tulip offers optional sign-in with Google. When you sign in, Google shares your email address, display name, profile picture, and a stable account identifier (sub). These are stored so your account is recognised across visits. A sign-in token is kept by your browser and a matching session record is kept in Cloudflare KV; both expire 30 days after your last visit. Your Tulip image gallery is stored only in your own browser.
Deleting your account (from within Tulip) removes every server-side record — profile, sessions, and account links. It does not clear your browser's local gallery; you can remove that by clearing site data in your browser.
Image generation (Tulip)
Prompts you submit are processed to generate images, and generated images are stored in Cloudflare R2 so your gallery works. Image links contain a random suffix, so they can't be guessed — but anyone you give a link to can open it. Generation runs on my own hardware; your prompts are never used to train models or shared with third-party AI services. The optional Enhance step rewrites your prompt using Cloudflare Workers AI. Prompts that are blocked by the safety filter are retained briefly, with the session id, so I can tune the filter.
Analytics
What follows is more detail than most sites give you. That's not because more is collected — it's so you can check.
These sites use small self-hosted analytics — no Google Analytics and no advertising pixels. A random session id is generated in your browser and kept in a first-party cookie (skd_sid) and in localStorage; it is sent with each page view so that visits can be counted and I can see which pages and features are used. Session records expire after 30 days of inactivity.
IP addresses are never stored in plain text: each address is stored both as a keyed hash (used to group traffic from the same source) and encrypted. I can decrypt a single address only through an admin action, which is written to an append-only audit log — it exists for abuse investigation, nothing else. Approximate country/region, plus device and browser type, are also recorded.
Claude Meter (macOS app)
Claude Meter reads your Claude usage limits locally on your Mac; your Claude account details, prompts, and conversations never leave your machine and are never sent to me. The app does make one network call to my server: an update check, which sends the app version and a random install identifier generated on first launch (it is derived from nothing about you or your Mac, and is used only to count how many installs are still running). Cloudflare adds the country the request came from. No usage figures are ever transmitted. The identifier is never used to look you up, and the app can be used offline.
Forms and email
The contact form on this site and the feedback forms in Tulip, the Knowledge Base, and Claude Meter's page send exactly what you type, plus your email address if you provide one, to my mailbox via a transactional email provider (Brevo). If you ask to be notified about updates, your email address is stored with Brevo until you unsubscribe. Forms are protected by Cloudflare Turnstile, which performs its own bot check under Cloudflare's privacy policy.
Cookies
These sites set one cookie by default — the random analytics session id (skd_sid) described above — plus the Tulip sign-in token if you choose to sign in. Neither is used to track you across other sites. Cloudflare sets its own cookies to serve and protect the sites and to run the Turnstile bot check. There are no advertising or cross-site tracking cookies.
Infrastructure
Everything runs on Cloudflare (DNS, hosting, Workers, storage). Cloudflare processes visitor traffic to serve and protect the sites, per its privacy policy linked above.
Your choices
You can browse everything without signing in. Cookies here are functional, not tracking — blocking them only affects sign-in. To remove your data: delete your Tulip account in the app, clear your browser's site data, or contact me and I'll remove any server-side records tied to you.
Changes
If this policy changes materially, the date above will be updated. Questions — reach me through the contact form.