Privacy, plainly stated.

This is a public professional portfolio. The evidence agent receives a submitted question only to answer from reviewed published knowledge; it is not a source of private project information.

For abuse prevention, a custom question or contact request may create an essential first-party showcase_session cookie. It is opaque, HttpOnly, Secure, SameSite=Lax, and expires after 24 hours. The service derives short-lived pseudonymous rate-limit keys from that session and a daily salted, truncated hash of the connection IP. Raw IP addresses, questions, and contact messages are not logged by this application. Rate-limit keys expire after ten minutes or at the daily limit boundary.

The contact form also checks its client-side form-start time and honeypot to reject obvious automated submissions; that timestamp is not logged. Contact submissions are not linked to agent questions.

When configured, hosting receives normal connection metadata. Custom questions and supporting published material are sent through OpenRouter to the configured model provider (OpenAI by default), and contact details are sent to Emailit and Bhaskar’s inbox. If those services are not configured, the relevant feature reports that it is unavailable rather than simulating success.

Theme preference is saved in local storage. Within-visit project selection and the last reviewed answer use session storage in this tab when available. Contact form details are not saved there. For privacy questions, email bhaskar.knp@gmail.com.