Colophon

How this site is built

A personal site is a small thing to secure well — so it's a fair place to practise what I preach. Nothing exotic here, just defaults chosen deliberately.

• Static by default

  Built with Astro and shipped as static HTML to Cloudflare Pages. No server to compromise, no database, no CMS — the smallest sensible attack surface for a personal site.

• Minimal third-party code

  The only third-party script is Cloudflare Turnstile, used to protect the contact form from bots. No analytics trackers, no advertising, no social widgets.

• Contact handled at the edge

  The contact form posts to a Cloudflare Pages Function that verifies the Turnstile token and a honeypot before relaying the message. Secrets live in the platform environment, never in the code.

• Signed, reviewed changes

  The source lives in a private git repository. Commits are made under a peer-review discipline and signed with a hardware security key — the same key hygiene I advocate professionally.

• Privacy-respecting

  No cookies are set for tracking. The contact form collects only what you type, and only to reply to you.