Security & privacy

This site is fully static — no server, no database, no analytics that fingerprint you. The interactive AI features use a Bring-Your-Own-Key model so the bill stays with you, not me.

What we don't collect

How AI features work

When you connect an AI account (OpenRouter via OAuth, or paste a direct Anthropic/OpenAI key), the credential lives in your browser's sessionStorage only — it vanishes when you close the tab. Calls go from your browser directly to the provider you chose; my site is never in the credential path.

Browser extensions and compromised tabs can read sessionStorage. If you don't trust the browser session you're in, don't paste a key — leave the playground until you're on a session you trust.

How the data on this site is sourced

The CV body is hand-authored YAML in the repo. The activity visualizer (Plan 3) snapshots GitHub and HackTheBox public data nightly via a build job.

Reporting

Found something? Email ledge.valley8269@eagereverest.com or open an issue on the public repo.