Portfolio Privacy Policy

Last updated: 29 September 2026

Portfolio is made by Kitchen Labs. It's a web app for building a professional profile and sharing it as a page. This page says, in plain English, what happens to your information.

The short version

Portfolio is private to its owner; there's no public sign-up. Anyone can try the demo.
Your portfolio is stored in Kitchen Labs' database, and only you can read or change it.
When you share, a frozen copy of your portfolio goes on a public page. Anyone with the link can see it, and search engines may list it.
Your email and phone are left off shared pages unless you tick a box to include them.
PDFs and data files are made in your browser. There are no ads and no tracking.

What we handle, and why

Your account. Portfolio is private to its owner: there is no public sign-up, and accounts are set up by Kitchen Labs. You sign in with an email address and a password. Sign-in is handled by Supabase, the service that hosts Kitchen Labs' database; your password is stored there as a secure hash, and Kitchen Labs never sees it. It's one Kitchen Labs login, so a login made for another Kitchen Labs app can't open Portfolio unless it was set up for Portfolio too.

Your portfolio. Everything you type into the editor is saved to the database each time you press Save: your name, pronouns, headline, location, email, phone, website, about text, experience, skills, awards, education, certifications, languages, projects, publications, volunteering and recommendations, plus any picture links you paste. The database only lets your own signed-in account read or change these rows.

Shared pages. When you tap Share and Create link, Portfolio stores a copy of your portfolio as it is at that moment and gives you a link (/s/…) with a long random code.

Anyone who has the link can open the page. We don't list shared pages anywhere, but search engines are allowed to index a page if they find the link (for example, if you post it publicly).
The copy doesn't change when you edit your portfolio later. To show newer changes, share again and send the new link.
Email and phone are left off the copy unless you tick Show my email and phone when you make the link.
The database won't list shares to anyone but you; a page can only be opened with its full link.
You can take a link back at any time: tap Share, find it under Your shared links, and tap Delete link. The copy is deleted from the database, and from then on the link shows "We couldn't find that page".

Pictures. Profile, banner and logo pictures are links to pictures that are already online; Portfolio doesn't upload or store the images. When you or a visitor open a page that shows one, the browser loads it from the site that hosts it, and that site can see the request.

Hosting. The app runs on Vercel. Like any web host, Vercel keeps short-lived request logs (such as IP address, the page requested and browser type) to run and secure the service. When something fails on our server we log the error so we can fix it; we don't log your portfolio content.

What stays in your browser

PDF résumé, PDF of this page, and Data file (JSON) are made on your device and downloaded straight to it. Nothing is sent to us to make them.
Your light or dark choice is saved in your browser.
The session cookies that keep you signed in. They're removed when you sign out.
The demo (/demo) uses a made-up person. What you change there stays in the open page only and is gone when you reload; nothing is sent to our database.

How to delete your data

Delete any entry in the editor with its delete button; it's removed from the database at once.
Delete a shared link from Share → Your shared links → Delete link; its copy is removed at once.
To delete your whole account and everything in it (portfolio and every shared copy), ask through our contact page, giving the address you signed up with. There isn't a button for this yet. Deleting the account removes all of its Portfolio rows and shared pages.

What we don't do

No advertising, no analytics or tracking scripts, no tracking across apps or websites, and no selling or sharing of data. We don't ask for your location, contacts or device information.

Children

Portfolio is not directed at children under 13 and is not meant to collect information from them.

Changes and contact

If this policy changes, we'll update the date above. Questions? Get in touch through our contact page.