← Home

Trust & Privacy

App-owned content

This page is maintained by Patrick P. Dieu to answer common security and privacy questions about this portfolio site. It describes practices and controls in effect today and is not an independent certification.

What this site is

A personal portfolio that showcases selected design work, a short biography, and a contact form. The site is operated by Patrick P. Dieu as an independent designer; there is no separate company entity behind it.

Hosting & platform

The site runs on Lovable Cloud, which provides the database, file storage, authentication, and edge compute used by the site. Traffic between your browser and the site is served over HTTPS. Lovable Cloud provides the underlying platform features; how the site uses them is described on this page.

Data we collect

Two kinds of information are intentionally collected:

  • Contact-form submissions. When you use the contact form we store the name, email address, optional subject, and message you enter so the owner can reply.
  • Owner-uploaded content. Project images, copy, and a downloadable CV are uploaded by the owner and served to all visitors.

The site does not run advertising trackers and does not sell visitor data.

How contact messages are handled

Form submissions are stored in a private database table that only the site owner can read. A notification email is sent to the owner so they can reply from their own inbox. Email delivery is handled by the platform’s built-in transactional email pipeline.

If you’d like a message you sent to be deleted, email the address in the footer and reference the rough date and subject.

Access controls

Public pages — work, about, contact — are visible to everyone. The admin area used to edit content, manage projects, and read contact messages is restricted to the owner’s account and is protected by row-level security in the database, so the owner’s data is only readable by that account even at the API layer.

Cookies & analytics

The site uses a small number of first-party cookies/local-storage entries needed for the site to function (for example, remembering your light/dark theme preference and, for the owner, an authentication session). It does not load third-party advertising or cross-site tracking.

Subprocessors

The platform vendor (Lovable Cloud) processes data on the owner’s behalf to host the database, storage, and email delivery used by this site. No additional third-party processors are configured today.

Security contact

If you believe you’ve found a security or privacy issue with this site, please email the address in the footer with a description and steps to reproduce. Reports are read by the owner directly.

This page is editable project content, not an independent attestation. It will be updated as practices change.