Privacy Policy
I run this site with zero third-party trackers, zero advertising cookies, and self-hosted fonts so your browser never leaks your IP address to external font CDNs. I honor Global Privacy Control signals by default, and display preferences stay in your own browser storage.
Zero advertising trackers or third-party ad cookies
I do not load advertising networks, behavioral retargeting scripts, tracking pixels, or third-party advertising cookies on davenporter.com. Reading essays, browsing code, and playing in the arcade never transmit your browsing history to external ad brokers. When aggregate reading telemetry (such as page-level dwell time, scroll depth, and Core Web Vitals via Google Analytics 4 or Cloudflare Web Analytics) is enabled, advertising personalization and cross-site Google signals are explicitly disabled (allow_google_signals: false and allow_ad_personalization_signals: false).
Self-hosted fonts and static assets
Every typeface (Newsreader and Plus Jakarta Sans), stylesheet, icon, and script is served directly from this origin under /static/. Your browser does not open connections to third-party font CDNs, preventing cross-site IP address and Referer header leakage.
Local display preferences
Theme and color palette choices are stored solely in your browser's local storage (davenporter-theme and davenporter-palette) so pages render without a flash of unstyled content. Those values never leave your device.
Global Privacy Control (Sec-GPC)
This site honors the Global Privacy Control signal (Sec-GPC: 1) and publishes machine-readable confirmation at /.well-known/gpc.json. Because I never sell or share personal data, Global Privacy Control restrictions are enforced by default for every visitor.
Interactive AI & Cloud Run logs
When you use the optional "Ask" feature, your browser first attempts to run Gemini Nano locally on your device. If your browser does not support on-device inference, your question is sent to this site's Google Cloud Run backend (us-central1) and answered with Vertex AI using project credentials without storing personal profiles. Standard transient HTTP request logs on Google Cloud Run are retained only for operational reliability and security diagnostics.
Contact
For privacy or security questions, see /.well-known/security.txt or reach out via GitHub (@davenportjw).