Policy

Privacy

Last updated November 8, 2026

This policy covers Zack Crawford's portfolio and the sites under it: the front page, the resume, Album Reviews, and picoCTF Solves. The short version: these are static sites, there are no accounts, no ads, no analytics, and no cookies.

What is collected

Browsing

Like every website, the server that delivers these pages sees basic request information: your IP address, browser type, and the page requested. The sites are hosted on Vercel, which handles these logs under its own privacy policy. I do not add any tracking on top of that.

Album Reviews newsletter

If you subscribe to the album newsletter, your email address is stored with Buttondown, the service that sends it. It is used only to send new reviews. Every email has an unsubscribe link, and unsubscribing removes you from the list.

Album requests

If you send an album request, the form sends your message, and your email address if you give one, through Formspree to my inbox. I use it only to read and reply to your request.

Spam protection

The album request form includes a hidden field that only automated bots fill in; Formspree discards those submissions. Your browser also keeps the times of your last few form submissions so it can briefly pause repeat sends. Those times stay on your device and are never sent anywhere.

Cookies and storage

These sites do not set cookies. A few small settings are kept in your browser's own storage. They never leave your device, and you can clear them at any time by clearing this site's data in your browser.

• Album Reviews theme (session storage): whether you picked light or dark mode. Cleared when you close the tab.
• picoCTF navigation (session storage): whether you have already seen the intro animation in this visit, and which category to return to after reading a write-up. Cleared when you close the tab.
• picoCTF reading background (local storage): whether you chose the dotted or solid background behind write-ups.
• Form timing (local storage): the times of recent form submissions, used only for the spam pause described above. Entries older than an hour are ignored.

Third-party resources

Some files are loaded from outside services, so your browser contacts them and they receive your IP address. None of them are used for tracking by these sites. The code libraries are pinned to exact versions and checked against a known fingerprint before they run.

• Google Fonts: the typefaces used across the sites.
• jsDelivr and cdnjs: the Three.js graphics library (front page, picoCTF, Album Reviews backgrounds), the Vanta background effect (Album Reviews), and the Markdown and code-highlighting libraries used to display write-ups (picoCTF).

To make pages open faster, your browser may download a page in advance when you point at a link to it on this site, and picoCTF write-up pages fetch the graphics library ahead of time for the way back. These downloads come from the same sources listed above.

What I don't do

• Sell, rent, or share your information with advertisers.
• Keep data longer than needed. Newsletter addresses are kept until you unsubscribe; request emails are deleted once handled.
• Knowingly collect information from children under 13. If you believe a child has submitted information, contact me and I will delete it.

Your choices

You can ask what information I have about you, or ask me to delete it, by emailing ZACrawfordx@gmail.com. I will respond within 30 days.

Changes

If this policy changes, the date at the top of this page will change with it.