Colophon

What this site does, and doesn't.

Privacy, licensing, and the parts worth stating plainly rather than burying in a document nobody reads.

Privacy

The short version: I don't collect anything. No analytics, no tracking pixels, no cookies, no advertising, no third-party scripts. Both typefaces are served from this domain, so loading a page doesn't announce your visit to anyone else. There are no forms, so there's nothing to submit.

Two things do happen, and a privacy page that omitted them would be lying:

server logsThis site is hosted on Cloudflare Pages. Like any web host, Cloudflare records requests — IP address, user agent, the path you asked for, a timestamp. Nothing pulls those anywhere else, and I don't read them. What Cloudflare does with them is covered by their privacy policy.

theme preferenceIf you use the light/dark toggle, your choice is saved in your browser'slocalStorage under the key theme. It never leaves your device, and nothing reads it except this site deciding which colors to paint. Left on "auto", nothing is stored at all. Clearing site data removes it.

That's the complete list.

Dates

Posts are dated to when the work happened, not when I wrote them up. This site went live in September 2026, and several posts describe projects from well before that — the dates are there so the timeline reads honestly, not to imply the writing is older than it is. Nothing here was previously published somewhere else.

Views are my own

Everything here is mine personally. I work as an engineer at a healthcare company, and nothing on this site is written on my employer's behalf, represents their position, or discloses anything about their systems, their customers, or their data.

Where work comes up, it's deliberately general — the engineering lessons, not the specifics.

Copyright

Code samples are a different matter: they're in the posts to be used. Treat snippets as public domain unless a post says otherwise.

How it's built

generatorAstro, statically generated. No server and no database at runtime, which is also the security posture.

hostingCloudflare Pages, deployed from git on every push.

typeIBM Plex Mono carries display and structural roles; Public Sans carries body copy. Both self-hosted.

stylingHand-written CSS with custom properties. No framework. The recurring motif is a supervision tree, which is an Elixir joke that got out of hand.

headersA per-build Content Security Policy with hashed inline scripts, plus HSTS,frame-ancestors, nosniff, and a referrer policy at the edge.

Security

Found something wrong with this site or one of my projects? Email me — encrypted if it warrants it. I'll respond, and I won't be weird about it.

security.txt PGP key Contact