Privacy Policy

1. Data we collect

Data is collected depending on how you interact with the site, split into "Functional" (necessary) and "Analytics" (optional).

Functional & necessary

This is required for the site to function securely. It can't be opted out of without affecting functionality.

• Formspree (Message delivery)

  When you send a message, your name, email address, and message content are submitted to Formspree, a form-processing service that forwards the message by email so I can reply.

• hCaptcha (Contact form spam protection)

  The contact form is protected from bots by hCaptcha, a privacy-focused CAPTCHA service. Completing the challenge shares limited technical data (such as IP address and browser information) with hCaptcha to verify you are human.

• Cloudflare Turnstile (Chat spam protection)

  The command-bar chat is protected from bots by Cloudflare Turnstile, a privacy-preserving CAPTCHA alternative that verifies you are human without tracking you across sites.

• Command-bar assistant (Cloudflare Worker + NVIDIA NIM) (Conversational portfolio answers)

  When you use the command-bar assistant, your questions and its answers are processed by a Cloudflare Worker and NVIDIA NIM. The six most recent exchanges are stored for up to 24 hours in Cloudflare KV so follow-up questions retain context; choosing “New chat” clears that history.

• Langfuse (LLM observability) (Assistant quality & abuse monitoring)

  Command-bar assistant conversations — your questions, the answers, and the lookups the assistant performs — are recorded in Langfuse, an LLM observability service (US-hosted), so I can debug answer quality and detect abuse. Conversations are grouped by a pseudonymised session identifier; your IP address is never included.

• Rate limiting (Cloudflare KV) (Abuse prevention)

  To enforce fair daily usage limits on the command-bar assistant, a pseudonymised (one-way hashed) form of your IP address is stored for up to 24 hours. The raw IP address itself is not retained.

• Sanity.io (Content delivery)

  Blog content is sourced from Sanity at build time. Routine requests may log basic technical data (IP address, user agent) for security and performance.

Analytics (optional)

Google Analytics is used to understand how visitors interact with the site. This is not collected unless you explicitly consent via the cookie banner or settings. With consent, analytics cookies track session data; IP anonymization is enabled where possible.

2. Cookies

Cookies manage your consent preferences, maintain command-bar chat continuity, and enable the analytics above.

• Essential cookies — remember your privacy choices (e.g. benhickman_consent_v1).
• Chat session cookie — associates command-bar follow-ups with the short-lived conversation stored in Cloudflare KV.
• Analytics cookies (Google Analytics) — only set if you accept or enable analytics in settings.

You can change your preferences anytime via "Cookie Preferences" in the footer.

3. Your rights (GDPR & CCPA)

Depending on your location, you have rights over your personal data:

• The right to access the personal data held about you.
• The right to request correction of inaccurate data.
• The right to request deletion of your data ("right to be forgotten").
• The right to withdraw consent at any time.

To exercise these rights, get in touch via the contact page.

4. Contact

Questions about this policy or these data practices? Reach out through thecontact page.