Trust & Privacy
App-owned content
This page is maintained by Patrick P. Dieu to answer common security and privacy questions about this portfolio site. It describes practices and controls in effect today and is not an independent certification.
What this site is
A personal portfolio that showcases selected design work, a short biography, and a contact form. The site is operated by Patrick P. Dieu as an independent designer; there is no separate company entity behind it.
Hosting & platform
The site runs on Lovable Cloud, which provides the database, file storage, authentication, and edge compute used by the site. Traffic between your browser and the site is served over HTTPS. Lovable Cloud provides the underlying platform features; how the site uses them is described on this page.
Data we collect
Two kinds of information are intentionally collected:
- Contact-form submissions. When you use the contact form we store the name, email address, optional subject, and message you enter so the owner can reply.
- Owner-uploaded content. Project images, copy, and a downloadable CV are uploaded by the owner and served to all visitors.
The site does not run advertising trackers and does not sell visitor data.
How contact messages are handled
Form submissions are stored in a private database table that only the site owner can read. A notification email is sent to the owner so they can reply from their own inbox. Email delivery is handled by the platform’s built-in transactional email pipeline.
If you’d like a message you sent to be deleted, email the address in the footer and reference the rough date and subject.
Access controls
Public pages — work, about, contact — are visible to everyone. The admin area used to edit content, manage projects, and read contact messages is restricted to the owner’s account and is protected by row-level security in the database, so the owner’s data is only readable by that account even at the API layer.
Cookies & analytics
The site uses a small number of first-party cookies/local-storage entries needed for the site to function (for example, remembering your light/dark theme preference and, for the owner, an authentication session). It does not load third-party advertising or cross-site tracking.
Subprocessors
The platform vendor (Lovable Cloud) processes data on the owner’s behalf to host the database, storage, and email delivery used by this site. No additional third-party processors are configured today.
Security contact
If you believe you’ve found a security or privacy issue with this site, please email the address in the footer with a description and steps to reproduce. Reports are read by the owner directly.
This page is editable project content, not an independent attestation. It will be updated as practices change.