Privacy. Almost nothing to tell.
One person's portfolio: no accounts, no forms, no comments, no advertising. There is very little about you to collect here and nothing to sell.
Analytics
Vercel Web Analytics counts page views with the referrer, the country and the device class. It sets no cookie, assigns no cross-site identifier and builds no profile. Vercel also keeps the ordinary server request logs — IP address, user agent, path — under its own policy at vercel.com/legal/privacy-policy.
Cookies
None for visitors. The only one the software can set is payload-token, the CMS admin session, issued after a login at /admin. There is one account, and it is mine.
Rate limiting
The read-only API is paced at 120 requests per 60 seconds. Counting them means keeping the caller's IP — the first entry of X-Forwarded-For — in the answering instance's memory for the length of that window, then dropping it. Never written to disk, never joined to anything.
Third parties
Vercel hosts the site and stores its media. Fonts are self-hosted, downloaded at build time, so no request goes to Google Fonts. No ad network, no tag manager, no session recording, no social embeds, no mailing list.
Crawlers and agents
robots.txt allows retrieval and training crawlers alike, and every page has a markdown and a JSON twin. That is deliberate, and documented at https://tobis.vision/developers. Nothing you send an agent is collected in return — the API is read-only and takes no request body.
Anything else
Ask, or ask for something to be removed: contact@tobis.vision. Last updated 2026-09-01.