Privacy Policy

Information you give me

None, through the Site itself. There is no sign-up, no login, no contact form, no comment box, and no newsletter. Nothing on the Site asks for a name, an address, or a payment detail.

If you choose to write to the email address the Site publishes, I receive whatever you put in that email. See Email, below.

Information collected automatically

Delivering a web page requires the server and the network in front of it to see the request. For each request, the providers named below record in their own logs:

• The IP address the request came from.
• The date and time of the request.
• The URL requested, and the referring URL if your browser sent one.
• Your browser's user agent string, which usually names the browser and the operating system.
• The status and size of the response.

These are operational and security records held by those providers. I do not build profiles from them, do not combine them with anything else, and do not use them to identify individual visitors.

Cookies and device storage

The Site sets no cookies. It uses no local storage, no session storage, no web beacons, no tracking pixels, no fingerprinting, and no other technique for recognizing a device across visits or across sites.

Because there is nothing to consent to, there is no cookie banner.

Analytics and advertising

There are none. The Site loads no analytics, no tag manager, no advertising network, no social media widget, no embedded video, no hosted font, and no third-party script of any kind. Every file the Site asks your browser to fetch is served from the Site's own domain.

Service providers

Two providers carry traffic to the Site and process request data on my behalf:

• Amazon Web Services, which hosts the server.
• Cloudflare, which sits in front of it as a content delivery network and provides caching, TLS, and protection against attack.

Each processes request data under its own privacy and security terms and keeps its logs for a limited period under its own retention schedule. Neither is authorized to use that data for its own purposes beyond providing and securing the service.

Email

If you write to me, I keep the message so that I can answer it and keep a record of the correspondence. I do not add your address to any mailing list and I do not share it. Ask me to delete the correspondence and I will, subject to any legal or professional obligation to keep it.

Disclosure

I do not sell, rent, trade, or share personal information. I would disclose information only where the law requires it, in response to valid legal process, or where disclosure is necessary to protect rights, safety, or the integrity of the Site.

Links to other sites

The Site links out to third-party sites, including LinkedIn, GitHub, and the sites of organizations named in my work history. Once you follow a link, that site's own privacy policy applies. I have no control over, and take no responsibility for, what those sites collect.

Retention

I hold no visitor database, so there is nothing on my side to retain. Provider logs are kept for the limited periods those providers set. Email correspondence is kept for as long as it is useful for the purpose it was sent, or as long as the law requires.

Security

The Site is served over HTTPS. It has no login, no database, and no user-supplied input, which removes most of the ways a site of this kind leaks anything. No method of transmission or storage is perfectly secure, and no absolute guarantee can be given.

Children

The Site is not directed at children, holds no content intended for them, and knowingly collects nothing from anyone under 16. If you believe a child has sent me personal information, write to me and I will delete it.

Your rights

Depending on where you live, you may have the right to ask what personal information is held about you, to have it corrected or deleted, to restrict or object to its processing, to receive a copy of it in a portable form, and to withdraw consent. Residents of California also have the right to know what is collected, to have it deleted or corrected, and to opt out of its sale or sharing. No sale or sharing happens here.

In practice I hold no visitor records to act on. If you have emailed me, those rights apply to that correspondence. Exercise any of them by writing to the address at the end of this policy. You will not be treated differently for asking, and there is no charge for it.

If you are in the European Economic Area or the United Kingdom, the lawful basis for processing request logs is my legitimate interest in delivering and securing the Site, and you have the right to complain to your local supervisory authority.

Where the Site is operated

The Site is operated from the United States, and the servers and the content delivery network that carry it sit there and in other countries. Visiting it means your request is processed in those places, which may have data protection laws different from your own.

Do Not Track

The Site does not track you, so a Do Not Track header or a Global Privacy Control signal changes nothing about how it behaves. Both are honored by default.

Changes to this policy

I may update this policy by posting the revised version on this page and updating the date at the top of it. Continuing to use the Site after a change means you accept the revised policy.

Contact

Questions, requests, or complaints about privacy go to [email protected].