A company site has to be fast, work in two languages, and still be true to a privacy policy that promises no tracking. Most sites promise that and then load a font from someone else's server.
Case studies
This site — generated from data, loads nothing
You are looking at the work right now
The problem
What I did
No HTML is edited by hand
Every page is generated from JSON by a builder I wrote. Adding a product is adding an object to a data file; the design cannot drift between pages because there is only one of it.
Two languages, enforced
The builder refuses to publish a product that is missing text in either language, so the Spanish can never quietly fall behind the English.
Nothing third-party, and it is enforced
A Content-Security-Policy of default-src 'none'. No fonts, no analytics, no icon packs. That is what makes the privacy policy true instead of decorative.
Language chosen without cookies or scripts
On the server, from the browser's Accept-Language. The site bans scripts by header, so loading one just to pick a language would have meant loosening exactly the thing that makes it private.
Tested across seven widths
A script drives a real browser from 320 to 1440 pixels and fails if anything overflows. It aborts rather than measure a page that has not finished laying out — a check that lies is worse than no check.
Where it ended up
Open the page source. There is nothing loaded from anyone else, and there never will be.
Built with: Python · generated static HTML · CSP · Chrome DevTools Protocol
Want something like this?
Two lines about the project is enough to start. A person reads it and a person answers.