Colophon
How this website is built.
This site is my business card. The same standards I apply here go into every project I build. Feel free to check for yourself.
01Privacy
0
cookies
0
trackers
0
third-party scripts
0
inline scripts
02Security
Content Security Policy
Only scripts and styles from this domain. No inline code, no eval, no external sources.
HSTS with preload
Browsers connect over HTTPS only, even on the very first visit.
Strict headers
X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP and CORP.
Static site
No database, no admin panel, no plugins: a minimal attack surface.
security.txt
A fixed place to report vulnerabilities, following RFC 9116.
Email & DNS
SPF, DKIM, DMARC and DNSSEC to prevent domain spoofing.
Animations respect the “reduce motion” system setting: you’ll get a calm version of the site.
03Stack
- Astro
- Static site generator, ships plain HTML
- TypeScript
- Type-safe code
- Tailwind CSS
- Design system and styling
- GSAP & Lenis
- Animation and smooth scrolling
- Geist
- Typeface, self-hosted
- Cloudflare Workers
- Hosting and CDN
04Verify it yourself
Don’t take my word for it. These independent tools show the current rating:
Let’s build something.
Tell me about your project. You’ll get an honest answer within one business day, even if I’m not the right fit.