ferrissmith.art serves static pages. It runs no third-party scripts, sets no cookies for browsing, and has no accounts to sign into.
Portfolio pages keep a running view tally — a single number per page, counted once per load. Nothing about a reader is stored with it: no cookies, no fingerprints, no addresses. To keep the tally honest, the server briefly holds rate-limit state keyed by a one-way keyed hash of the requesting address; the address itself is never stored and cannot be recovered from the hash. If the counter is ever unavailable, pages simply render without a number.
Checkout happens on Stripe's hosted pages. Card details never touch this site; Stripe's privacy policy governs the payment itself. The order details Stripe returns are used to fulfil the order, and for nothing else.
Email sent to the address on the contact section is used to reply, and for nothing else.
The site's mascot, D-6401, answers questions through an AI model (Anthropic's Claude). Conversations are not stored on the server: the transcript lives only in your browser tab and is gone when you close it. Each message is sent to Anthropic's API to generate the reply and is handled under Anthropic's data policies. To keep the feature within its budget, the server briefly holds rate-limit state keyed by the same one-way keyed hash of the requesting address used for view counts, expiring within an hour; the address itself is never stored.
The site is operated from Georgia, United States, and this policy is governed by Georgia law. It can change as the site grows; the date above is the latest revision.