Privacy Policy

This is a personal portfolio site. It has no accounts or logins, uses no advertising or cross-site tracking cookies, and never sells your data. The only places any data is touched are the optional AI assistant and privacy-friendly visitor analytics, both described below.

The site offers an optional AI chat assistant that answers questions about Travis's background and work. Conversations are not stored, logged, or retained. Nothing you type is saved, and no record of your questions is kept after the reply is generated.

To produce a reply, your message is sent to Anthropic, the provider of the Claude model, and is handled under Anthropic's terms. Anthropic does not use data submitted through its API to train its models. Anthropic processes this data in the United States. The assistant draws only on a curated, public summary of Travis's background; it has no access to private data.

The assistant also stores a short random session ID in your browser (via sessionStorage, which clears when you close the tab) so it can count messages per session. It holds no personal data.

To prevent abuse, the site keeps a short-lived request counter for up to 24 hours, then deletes it automatically. The counter is keyed to a one-way (salted) hash of your IP address and session ID, never the raw IP and never any message content. A hashed IP can still count as personal data, so it is treated that way and discarded within 24 hours.

One narrow security exception. If a single message you send matches a pattern that looks like an attempt to probe or attack the assistant (for example, prompts that try to extract the assistant's instructions, environment variables, or credentials), that one message is stored for up to 7 days alongside the same kind of one-way hashed IP described above and the pattern it matched. This is used only to investigate abuse of the assistant. It is automatically deleted within 7 days, and no other conversation content, replies, or normal questions are retained.

The site uses Vercel Web Analytics to understand aggregate traffic such as page views and referrers. It is privacy-friendly: it sets no cookies, does not track you across other sites, and does not build a profile of individual visitors. The data is aggregated and not used to identify you.

• No accounts, logins, or passwords
• No advertising or cross-site tracking cookies
• No sale or sharing of personal data with data brokers
• No health, location, or financial data about visitors

Because the site keeps no accounts and stores no conversation history, there is essentially no personal data to retrieve or delete; the abuse counter deletes itself within 24 hours. If you have a question about any data the site may hold, email Travis and he'll address it.

This site is operated by Travis Fraser as an individual. Questions about this policy? Reach him at tfraser01@berkeley.edu. This policy may be updated from time to time; the date above reflects the current version.