Privacy
This site is a personal portfolio and a small set of self-built apps. There is no advertising, no sale or sharing of personal data, and no data collected beyond what each feature below needs to work.
Signing in with Google
Tulip offers optional sign-in with Google. When you sign in, Google shares your email address, display name, profile picture, and a stable account identifier (sub). These are stored to recognise your account across visits, along with a session token kept in Cloudflare KV. Your browser also keeps a sign-in token, an anonymous visitor id, and your image gallery in localStorage.
Deleting your account (from within Tulip) removes all server-side records — profile, sessions, and account links. It does not clear your browser's local gallery; you can remove that by clearing site data in your browser.
Image generation (Tulip)
Prompts you submit are processed to generate images, and generated images are stored in Cloudflare R2 so your gallery works — note that anyone with an image's direct link can view it. Generation runs on my own hardware; your prompts are never used to train models or shared with third-party AI services. The optional Enhance step rewrites your prompt using Cloudflare Workers AI.
Analytics
These sites use small self-hosted analytics — no Google Analytics, no advertising pixels from me. A random session id is set in a first-party cookie to count visits and understand which pages and features are used. IP addresses are not stored in readable form: they are hashed or encrypted, and used only to group abusive traffic and approximate country-level geography. Basic device and browser type are recorded.
Forms and email
The contact form and the feedback form send exactly what you type, plus your email address if you provide one, to my mailbox via a transactional email provider (Brevo). Forms are protected by Cloudflare Turnstile, which performs its own bot check under Cloudflare's privacy policy.
Infrastructure
Everything runs on Cloudflare (DNS, hosting, Workers, storage). Cloudflare processes visitor traffic to serve and protect the sites, per its privacy policy linked above.
Your choices
You can browse everything without signing in. Cookies here are functional, not tracking — blocking them only affects sign-in and visit counting. To remove your data: delete your Tulip account in the app, clear your browser's site data, or contact me and I'll remove any server-side records tied to you.
Changes
If this policy changes materially, the date above will be updated. Questions — reach me through the contact form.