Privacy, without
the fine-print fog.
This page explains what the portfolio measures, why it does so, how long records remain, and how you can turn anonymous analytics off in this browser.
What the site measures
The public portfolio can record the page you opened, a random visitor identifier saved in this browser, a temporary session identifier, the referring website's hostname (not the full referring URL), and an approximate page-load duration. These signals help us understand which pages are useful and diagnose slow pages.
The portfolio's analytics code does not ask for your name, phone number, precise location, contacts, or the contents of your messages. It does not record what you write in WhatsApp or email. If you choose to contact us using those services, their own privacy terms also apply.
Browser storage and your choice
When enabled, anonymous analytics uses browser storage for random visitor and session IDs. This page itself does not load the analytics tracker. You can opt out below; the choice is saved locally in this browser. We also respect browser Do Not Track and Global Privacy Control signals where the browser exposes them.
Clearing this site's browser storage may reset your choice. A choice made on this device does not automatically apply to another browser or device.
Why we use these records
- Understand aggregate page visits and basic site performance.
- Limit repeated public requests that could abuse the analytics or settings endpoints.
- Maintain security and troubleshooting records for the private studio control room.
The public portfolio does not use this analytics system for advertising profiles or cross-site ad targeting.
Retention and protection
Page analytics are kept for up to 90 days; browser-session summaries and API timing samples for up to 30 days; hashed request-address rate-limit keys for about 2 hours; and administrator activity records for up to 365 days. Expired login attempts and password-recovery records are cleaned up automatically.
The app does not store the raw request IP address in its analytics records. A one-way hash of the request address is used briefly for abuse throttling. The hosting platform may keep separate infrastructure logs under its own policies. Admin controls require an authenticated owner or approved-team session; the public analytics endpoint cannot read or change site settings.
Contact
For a privacy question or request about information held by OVERALL Creative Studio, email overall54120@gmail.com.