I’m Benjamin Tan, and I run ben-tan.com, my portfolio. This notice covers the whole portfolio.
That includes the pages you browse, artwork, guides, tools, and the Bending Machine. Shared practices come first, then the details for each feature.
The short version
Cloudflare delivers and protects the whole portfolio. Plausible measures visits and engagement across the Site. If you email me, I use what you send to reply and follow up. I don’t sell your personal information or share it to target ads across different sites.
Where working tools are available, they process your inputs in your browser and may save settings there; the Bending Machine keeps a local record and offers an optional SomaFM radio. Navigation and downloads are explained separately too.
The full notice
1. The whole portfolio
This notice covers ben-tan.com: its portfolio pages, artwork, guides, tools, interactive experiences, and privacy pages. The practices below are grouped by activity, with feature-specific details available where needed.
If collection, use, storage, or disclosure changes, I’ll update this notice and its date and explain relevant changes alongside the feature.
2. Hosting and analytics
Hosting and security
Cloudflare hosts, delivers, and protects the portfolio. Page and hosted-file requests send it your IP address, requested address, and other technical request details so it can deliver content and help prevent abuse.
I use Plausible across the portfolio, including pages, tools, guides, and interactive experiences. It reports page views, time spent, scroll depth, and the referring site. Download clicks, external-link clicks, and form submissions aren’t tracked.
Plausible uses your IP address and browser details to estimate your location and count visitors within a day. Reports can include approximate location, browser, and device type. It doesn’t keep your IP address or the full browser description sent with the request. It keeps records of events and visits to calculate the overall reports I see. The daily visitor count is separate from how long those records are kept.
Anything after ? or # in a page address is left out of the reports. A referral is reported as just the site address. Tool inputs, file contents, and results are left out. Plausible doesn’t use cookies or save a visitor ID in your browser.
I don’t sell your personal information or share it to target ads across different sites. You don’t need to press anything to stop those activities.
When you email me, I receive your email address, message, and attachments. Email services deliver and store our correspondence. I use what you send to reply and follow up.
I normally delete routine emails 12 months after our last meaningful email exchange. I keep messages longer when needed for ongoing work or required records, and review those exceptions once a year.
The 12-month email period doesn’t apply to hosting, analytics, or radio records. Those records follow the relevant service arrangements and settings; the linked provider policies describe their practices. Plausible lets me delete the site’s analytics. An email address doesn’t let me reliably identify a particular visitor’s analytics records.
You can clear data saved by this site through your browser settings. Browser privacy tools may block analytics requests. Clearing browser data doesn’t erase email, downloaded files, or records already held by Cloudflare, Plausible, or SomaFM.
For questions or requests about information I hold or control, including access, correction, or deletion, email hello@ben-tan.com. Tell me which feature and information you mean. I’ll explain what I can identify and what action I can take. For information kept only in your browser, use the relevant feature controls or browser settings.
Links to LinkedIn, project sites, and other destinations lead to separate services with their own privacy notices.
4. Processing files and choices
Test Data Generator creates sample data and reads selected setup files in your browser. PII De-identifier processes selected files in browser memory. These tools don’t send inputs, file contents, or results to me or a processing server. Your browser creates output and setup downloads when requested. Loading the tools still makes the hosting and analytics requests described above.
Guide searches and choices stay in this tab’s memory. They aren’t uploaded or saved between visits. Reloading restarts the path; Copy puts the result on your clipboard when you ask.
Saved records and downloaded files have separate controls below.
5. Saving work on your device
Some features save records in this browser between visits. Reloading doesn’t clear them. That’s different from temporary tab memory and downloaded files.
Study progress, saved notes and reflections, and separate drafts.
Saved rules, machine history, and CIPT records don’t expire on a timer. Each feature’s controls affect its own records; clearing this site’s browser data is broader. Your browser can also lose or remove stored data. Downloaded files and copies in another browser or at another address are separate.
CIPT records aren’t encrypted or protected by a Studio sign-in. Other scripts on the same portfolio origin can access them. Studio doesn’t send these records to me or automatically sync them across browsers or devices.
CIPT backup files are readable and unencrypted. The progress JSON leaves out separate drafts; draft recovery text is a separate file.
Import replaces progress instead of combining histories. If saving fails, your original saved progress and drafts stay intact. Optional tab-only recovery doesn’t save progress or draft changes; reload brings back the original saved copy.
Turning on the optional radio connects your browser directly to SomaFM. It receives your IP address and the request details needed to stream music. Turning it off stops the stream. It doesn’t delete information SomaFM already received.
Cloudflare delivers hosted files such as artwork and my resume. Tool outputs, setup files, and the machine’s record export are created locally when requested. Download clicks aren’t tracked in analytics. Clearing browser storage doesn’t remove files already downloaded; manage those wherever you saved them.
You can copy or download a CIPT voice-practice brief to share elsewhere. Studio doesn’t use your microphone, record audio, call an AI or speech service, or upload transcripts.
Pages can use temporary browser state to keep navigation working. EMA search text can appear in the page address and history, a link you copy, or a request to the host. Plausible leaves it out of analytics.
Cloudflare provides hosting, delivery, and security across the portfolio. Plausible analytics loads across the Site. I use email correspondence to respond and follow up. I do not sell personal information or share it for cross-site targeted advertising.
Feature-specific processing is described separately: browser-based tools, optional saved settings, the Bending Machine’s local record and opt-in radio, navigation handoffs, and downloads. Tool inputs, file contents, and results are not included in analytics.
The full notice
1. Portfolio scope
This notice covers ben-tan.com: its portfolio pages, artwork, guides, tools, interactive experiences, and privacy pages. The practices below are grouped by activity, with feature-specific details available where needed.
If collection, use, storage, or disclosure changes, I will update this notice and its date and explain relevant changes alongside the feature.
2. Hosting, security, and analytics
Hosting and security
Cloudflare hosts, delivers, and protects the portfolio. Page and hosted-file requests send it your IP address, requested address, and other technical request details so it can deliver content and help prevent abuse.
I use Plausible across the portfolio, including pages, tools, guides, and interactive experiences. It reports page views, time spent, scroll depth, and the referring site. Download clicks, external-link clicks, and form submissions are not tracked.
Plausible uses IP addresses and User-Agent information to derive approximate location, browser/device information, and a daily visitor identifier. It does not store raw IP addresses or User-Agent strings. It stores event and session records to calculate the aggregate statistics shown in its dashboard. A daily identifier is not a promise that analytics records are deleted each day.
Reported page addresses exclude query strings and fragments. Referral addresses are reduced to their origin. Tool inputs, file contents, and generated results are excluded. Plausible does not use cookies or browser storage to identify visitors.
I do not sell personal information or share it for cross-site targeted advertising. No control needs to be activated to prevent those activities.
When you email me, I receive your email address, message, and attachments. Email services deliver and store our correspondence. I use what you send to reply and follow up.
I normally delete routine correspondence 12 months after our last substantive exchange. I keep messages longer when needed for ongoing work or required records, and review those exceptions annually.
The 12-month email period does not apply to hosting, analytics, or radio records. Those records follow the relevant service arrangements and settings; the linked provider policies describe their practices. Plausible lets me delete the site’s analytics. An email address does not let me reliably identify a particular visitor’s analytics records.
Your choices and requests
You can clear data saved by this site through your browser settings. Browser privacy tools may block analytics requests. Clearing browser data does not erase email, downloaded files, or records already held by Cloudflare, Plausible, or SomaFM.
For questions or requests about information I hold or control, including access, correction, or deletion, email hello@ben-tan.com. Tell me which feature and information you mean. I will explain what I can identify and what action I can take. For information kept only in your browser, use the relevant feature controls or browser settings.
Links to LinkedIn, project sites, and other destinations lead to separate services with their own privacy notices.
4. Processing files and choices
Test Data Generator creates sample data and reads selected setup files in your browser. PII De-identifier processes selected files in browser memory. These tools do not send inputs, file contents, or results to me or a processing server. Your browser creates output and setup downloads when requested. Loading the tools still makes the hosting and analytics requests described above.
Guide searches and choices remain in temporary tab memory, without uploads or persistent storage. Reloading restarts the path. Copy places the result on the clipboard only when requested.
Study progress, saved notes and reflections, and separate drafts.
Saved rules, machine history, and CIPT records have no automatic expiration. Feature controls affect their own records; clearing this site’s browser data is broader. Browser storage may also be lost or removed. Downloaded files and copies at another browser or origin remain separate.
CIPT records are unencrypted, without a Studio sign-in. Scripts on the same portfolio origin can access them. Studio does not upload these records to me or automatically sync them across browsers or devices.
CIPT backup files are readable and unencrypted. The progress JSON excludes separate drafts; draft recovery text is a separate file.
Imports replace progress rather than merge histories. If saving fails, original saved progress and drafts remain intact. Optional tab-only recovery does not save progress or draft changes; reload restores the original saved copy.
Turning on the optional radio connects this browser directly to SomaFM. SomaFM receives the IP address and stream-request details. Turning it off stops the stream; it does not erase information already received.
Cloudflare delivers hosted files such as artwork and my resume. Tool outputs, setup files, and the machine’s record export are created locally when requested. Download clicks are not tracked in analytics. Clearing browser storage does not remove files already downloaded; manage those wherever you saved them.
CIPT voice-practice briefs are copied or downloaded only on request, for sharing outside Studio. Studio does not access the microphone, record audio, call an AI or speech service, or upload transcripts.
Page navigation can use temporary browser state. EMA search text can appear in the address and browser history, a copied link, or a request to the host. Plausible excludes it from analytics.
I’m Ben—Benjamin Tan if the paperwork insists. I run the portfolio at ben-tan.com.
This covers the whole portfolio: pages, artwork, guides, tools, and the Bending Machine. Shared practices first; individual features next. Yup, three privacy notices for a single website.
Why? Because somewhere along the way, privacy notices that were meant to provide transparency to users suddenly became legalese walls of text to appease auditors. So, here's my solution. I'll have my cake, I'll eat it, and I'll have leftovers.
Paging self-restraint. Is self-restraint in the room?
Cloudflare delivers and protects the whole portfolio. Plausible tells me how people use the Site, across its pages. If you email me, I use what you send to reply and follow up.
Then there are the working features you choose to use, where available: tools in your browser, optional saved settings, the Bending Machine’s local record and optional radio, and files you download. Each gets its own explanation below. Your tool inputs, file contents, and results aren’t included in analytics.
I don’t sell your personal information or share it to target ads across different sites.
Save your applause. “He doesn’t sell your data” is a depressing reason for a standing ovation. The bar really is on the floor these days.
The full notice
1. An entire portfolio. Paperwork included.
This notice covers ben-tan.com: its portfolio pages, artwork, guides, tools, interactive experiences, and privacy pages. The practices below are grouped by activity, with feature-specific details available where needed.
If collection, use, storage, or disclosure changes, I’ll update this notice and its date and explain relevant changes alongside the feature. I build one new button, and suddenly I’m back here documenting its entire lifecycle. So, please enjoy the button. At least one of us should.
2. Who gets what
Hosting and security
Cloudflare hosts, delivers, and protects the portfolio. Page and hosted-file requests send it your IP address, requested address, and other technical request details so it can deliver content and help prevent abuse.
I use Plausible across the portfolio, including pages, tools, guides, and interactive experiences. It reports page views, time spent, scroll depth, and the referring site. Download clicks, external-link clicks, and form submissions aren’t tracked.
Plausible uses your IP address and browser details to estimate your location and count visitors within a day. Reports can include approximate location, browser, and device type. It doesn’t keep your IP address or the full browser description sent with the request. It keeps records of events and visits to calculate the overall reports I see. The daily visitor count is separate from how long those records are kept.
Anything after ? or # in a page address is left out of the reports. A referral is reported as just the site address. Tool inputs, file contents, and results are left out. Plausible doesn’t use cookies or save a visitor ID in your browser.
I’m trying to see whether anyone uses the portfolio. A page view is evidence that someone arrived. If I start treating it as a standing ovation, please take the dashboard away.
3. The inbox and other jurisdictions
I don’t sell your personal information or share it to target ads across different sites. No ceremonial button press is required to prevent those activities.
When you email me, I receive your email address, message, and attachments. Email services deliver and store our correspondence. I use what you send to reply and follow up.
I normally delete routine emails 12 months after our last meaningful email exchange. I keep messages longer when needed for ongoing work or required records, and review those exceptions once a year.
The 12-month email period doesn’t apply to hosting, analytics, or radio records. Those records follow the relevant service arrangements and settings; the linked provider policies describe their practices. Plausible lets me delete the site’s analytics. An email address doesn’t let me reliably identify a particular visitor’s analytics records.
You can clear data saved by this site through your browser settings. Browser privacy tools may block analytics requests. Clearing browser data doesn’t erase email, downloaded files, or records already held by Cloudflare, Plausible, or SomaFM.
For questions or requests about information I hold or control, including access, correction, or deletion, email hello@ben-tan.com. Tell me which feature and information you mean. I’ll explain what I can identify and what action I can take. For information kept only in your browser, use the relevant feature controls or browser settings.
Links to LinkedIn, project sites, and other destinations lead to separate services with their own privacy notices.
This is an inbox, not a mausoleum with Wi-Fi, and I’d rather not torture myself by eternalizing our conversation.
4. Processing files and choices
Test Data Generator creates sample data and reads selected setup files in your browser. PII De-identifier processes selected files in browser memory. These tools don’t send inputs, file contents, or results to me or a processing server. Your browser creates output and setup downloads when requested. Loading the tools still makes the hosting and analytics requests described above.
Guide searches and choices stay in this tab’s memory. They aren’t uploaded or saved between visits. Reloading restarts the path. Copy puts the result on your clipboard when you ask; it isn’t secretly submitting your homework.
Saved records and downloaded files have their own controls below. Reload is not a universal eraser.
5. Saving work on your device
Some features keep browser records between visits. Reloading doesn’t clear them. Refresh has not been promoted to factory reset. Temporary tab memory and downloaded files are different again.
Study progress, saved notes and reflections, and separate drafts.
Saved rules, machine history, and CIPT records don’t expire on a timer. Each feature’s controls cover its own records; clearing this site’s browser data is broader. Your browser can also lose or remove stored data. Downloads and copies in another browser or at another address are outside that jurisdiction.
CIPT records are unencrypted, without a Studio sign-in. Other scripts on this portfolio’s origin can access them. Studio doesn’t upload these records to me or automatically sync across browsers or devices. Another route on this same origin isn’t a security perimeter.
CIPT backup files are readable and unencrypted. The .json extension is not a padlock. Progress JSON excludes separate drafts; draft recovery text is a separate file.
Import replaces progress; it doesn’t merge histories. If saving fails, your original saved progress and drafts survive. Optional tab-only recovery doesn’t save progress or draft changes. Reload returns the original saved copy. “For this tab only” is doing unusually honest work here.
Turning on the optional radio connects your browser directly to SomaFM. It receives your IP address and the request details needed to stream music. Turning it off stops the stream. It doesn’t delete information SomaFM already received.
Cloudflare delivers hosted files such as artwork and my resume. Tool outputs, setup files, and the machine’s record export are created locally when requested. Download clicks aren’t tracked in analytics. Clearing browser storage doesn’t remove files already downloaded; manage those wherever you saved them.
You can copy or download a CIPT voice-practice brief and take it elsewhere. Studio doesn’t use your microphone, record audio, call an AI or speech service, or upload transcripts. The conversation happens wherever you choose to have it.
Pages use temporary browser state to keep navigation working. EMA search text can travel in the page address, history, a copied link, or a request to the host. Plausible leaves it out of analytics. A link can carry more than your enthusiasm.