Security & privacy

This site is fully static — no server, no database, no analytics that fingerprint you. The interactive AI features use a Bring-Your-Own-Key model so the bill stays with you, not me.

What we don't collect

How AI features work

When you connect an AI account (OpenRouter via OAuth, or paste a direct Anthropic/OpenAI key), the credential lives in your browser's sessionStorage only — it vanishes when you close the tab. Calls go from your browser directly to the provider you chose; my site is never in the credential path.

Browser extensions and compromised tabs can read sessionStorage. If you don't trust the browser session you're in, use demo mode instead.

How the data on this site is sourced

The CV body is hand-authored YAML in the repo. The activity visualizer (Plan 3) snapshots GitHub and HackTheBox public data nightly via a build job.

Reporting

Found something? Email cameron.hartman081@gmail.com or open an issue on the public repo.