Site information / 05
Privacy &
cookies.
What this website currently does with visitor information.
Updated 26 October 2026Information collected
The enquiry form is a preview and is not accepting submissions. You can type into its fields, but sending is disabled; this website does not transmit or save those entries. Messages sent through the social links are handled by the destination service. Optional audience measurement is described below. The public portfolio has no mailing list or advertising tracker.
Hosting and services
The site is hosted on GitHub Pages, which logs visitor IP addresses for security. Typefaces are requested from Google Fonts. Supabase provides the private workspace’s authentication, database and optional analytics endpoint in its US East (Ohio) region. These providers also process technical request information under their own practices. See GitHub’s privacy statement, Google’s privacy policy and Supabase’s privacy policy.
Optional audience measurement
Measurement starts only when you choose “Allow analytics.” It records the public page path, time, broad device category, referring website’s hostname, anonymous tab identifier and clicks to Instagram, IMDb or LinkedIn. It does not record form contents, URL query strings, precise location or private workspace activity as visitor analytics. The application does not store raw IP addresses in analytics records. Security rate limits use a keyed hash of the request address, kept for up to one day plus the daily cleanup interval. Analytics records are removed by a daily cleanup after 90 days. The administrator can inspect event details; Mackenzie’s view receives summary totals. “No thanks” keeps measurement off. Browser Do Not Track and Global Privacy Control signals are respected. You can change your choice above at any time to stop future measurement.
Private workspace
Authorised accounts use Supabase Auth to sign in. The workspace stores account profiles, access settings, professional contacts, opportunities, tasks and notes entered by its users. Access is restricted by role and sharing settings. An admin activity log records who changed a record or access setting, without copying passwords or message bodies into that log. Workspace records remain until the administrator removes them; removing a record does not remove its audit entry. Recovery email addresses are attached to the private accounts and are not shown on the public portfolio.
External links
Links to IMDb, Instagram, LinkedIn, and other external websites take you to their services, which have their own privacy practices. We do not control those services.
Changes and questions
This notice will be updated when the site’s data practices change. For a privacy or data request, use the professional links on the Contact page ↗.