Privacy

Privacy notice

What this site stores about you, and for how long.

Last updated 2026-09-28

Portfolio overview

Who is responsible

This site, vornehm.us, is operated by Zack DesJardins, an individual. The design shop on it trades as Vornehm. Below, “the operator” means him.

What this site stores, and for how long

The password gate

  • Signing in with the site password sets one cookie: a signed session token that holds its own expiry time and nothing about you. It is HttpOnly, Secure and SameSite=Lax, and it lasts 7 days.
  • A wrong password adds one to a counter stored under a keyed hash of your connection’s IP address; the address itself is not stored. The counter expires 15 minutes after the first wrong password; after 10 wrong passwords the gate refuses further tries for 15 minutes. A correct password adds nothing.

Share links

  • A share link lets you in without the password. Opening one sets the same 7-day session cookie, plus a second cookie for 24 hours that holds the link’s label and expiry date, which the portfolio’s home page shows back to you.
  • The site records that the link was opened: its label, its kind and the time, with no address and no browser details. The newest 200 of these records are kept and older ones drop off.
  • When the site’s email is set up, the operator is emailed the same three facts.
  • A one-time link also leaves a record that it has been used, kept for at least a day after the link itself expires.

The design shop

  • If you buy, you pay on Stripe’s checkout page or through PayPal’s buttons, which load from PayPal. Your payment details are entered with them, under their own terms, not on this site.
  • This site then keeps an order record: the payment provider, its reference for the payment, the item and license tier (or, for custom work, the quote and its full price), the amount, the currency and the time. It holds no name and no email address, and it has no set expiry. A list of the newest 500 order records is kept as well.
  • The payment provider passes this site the email address you gave it. The site uses it to email you your download link (or, for custom work, your deposit confirmation) through Resend, an email service, and sends the operator a notice of the order that includes that address. The address is not written to the site’s store; the operator’s copy stays in his mailbox until he deletes it.
  • Your download link is signed and works for 7 days. The print files are kept in Cloudflare R2, a private file store, and this site fetches them from there when you download.
  • If you price a custom job, the site keeps the quote (the job’s specification, its price and its deposit, with no name or email) for 7 days, then deletes it automatically.

Drink-program notes

  • The notes form sends what you write: two answers of up to 2,000 characters each, which recipe the note is about, and a shop name and a contact only if you choose to give them.
  • The note is stored for 180 days, then deleted automatically. It can be read only behind the site password.
  • A short copy is emailed to the operator through Resend: the recipe, the shop name if you gave one, and the first 200 characters of each answer. Your contact is not in it. That copy stays in his mailbox until he deletes it.
  • To limit abuse, a keyed hash of your connection’s IP address is kept for one hour to count notes; more than 6 in an hour are refused. The address itself is never stored.

The send-gate demo

  • The demo on the proof page stores no message text and no address. A keyed hash of your connection’s IP address is kept for one minute to limit it to 30 runs a minute.

Analytics

  • Vercel Web Analytics counts page views. It sets no cookies and sends no identifying data.

Hosting

  • The site is hosted on Vercel. The store behind the gate, the share links, the shop and the notes is Vercel KV, run on Upstash.

What this site never does

  • Its store holds no IP addresses and no browser details (user agents). Where a limit has to tell connections apart, it keeps a keyed hash instead, as described above.
  • The code that receives a note never writes what you wrote to a log.

How long it is kept

  • Drink-program notes: 180 days in storage, plus the emailed copy until the operator deletes it.
  • Custom-work quotes: 7 days.
  • The notes rate-limit hash: 1 hour. The wrong-password counter: 15 minutes. The demo limit: 1 minute.
  • Analytics: nothing that identifies you.
  • The session cookie: 7 days. The share-link cookie: 24 hours.
  • Share-link records: the newest 200.
  • Order records: no set expiry. Order emails: until the operator deletes them.

Anything the site holds about you is deleted sooner if you ask.

Your choices

You can ask for a copy of what this site stores about you, ask for it to be deleted, or object to being counted by the analytics. Use the contact on the welcome page.

Contact on the welcome page

Changes

Changes to this notice are made on this page, and the date at the top moves with them.