Privacy policy.

What I collect

Information you give me

• Newsletter signup — email address only. Stored by my email service provider.
• Contact form — name, email, message body, and the topic radio button you selected. Stored by my form provider (currently Resend via Cloudflare Pages Functions).
• Course purchase (if applicable) — name, email, and payment method handled entirely by Stripe. I see name and email; I never see your card number.

Information collected automatically

Standard web analytics: IP address (truncated by GA4), approximate location (country/region — not street address), browser type, device type, referring URL, pages visited, time spent, and outbound link clicks. This data is aggregated and anonymized.

How I use it

• Send the newsletter to people who asked for it.
• Reply to messages you send via the contact form.
• Decide which posts are working and which to rewrite or kill.
• Improve site performance (page speed, broken links, etc.).
• Comply with the law if served with a valid subpoena or equivalent.

I do not use your data for behavioral retargeting, audience selling, ad networks, or any "data enrichment" service.

Cookies and tracking

The site uses the following:

• Google Tag Manager (GTM-WCQ8BCT) — a script loader that runs the analytics + tag stack below. Sets a _ga cookie chain.
• Google Analytics 4 — page views, sessions, events, outbound clicks. Cookie: _ga and _ga_*. Retention: 14 months.
• Cloudflare — performance / DDoS protection. Sets __cf_bm session cookie (30 min) per their bot-management.
• Pagefind — on-site search runs locally in your browser; no tracking.

You can opt out of GA4 via the Google Analytics opt-out browser add-on, or by blocking the GTM script in your browser. The site works without it.

Sharing

I don't sell, rent, or trade your data. I do share it with the following service providers — narrowly, only what each one needs to function:

• Email service provider (newsletter delivery)
• Cloudflare (hosting, DDoS, edge functions, form submissions)
• Google (Tag Manager + Analytics)
• Stripe (payments, if you purchase)
• Resend (transactional email + form notifications)

If I ever sell the business or transfer it to a successor, your data moves with the business. You'd be notified before that happens.

Your rights

Regardless of where you live:

• Access — request a copy of any data I hold about you.
• Correction — fix anything that's wrong.
• Deletion — remove it entirely. Mailing-list unsubscribe is one click.
• Portability — get a machine-readable export.
• Opt-out — turn off analytics or marketing emails any time.

EU/UK/EEA residents have additional rights under GDPR. California residents have additional rights under CCPA/CPRA. Either way, the request mechanism is the same: send a note via the contact form and I'll process it within 30 days.

Data retention

• Newsletter list — kept until you unsubscribe, then deleted within 60 days.
• Contact-form messages — kept for 24 months in case the conversation resumes, then deleted.
• Analytics — 14 months, then anonymized further.

International transfers

The site is hosted on Cloudflare's global network and data may pass through servers in the US, EU, or elsewhere. Where required (GDPR), my providers use standard contractual clauses or equivalent transfer mechanisms.

Children's privacy

This site isn't directed at anyone under 13. I don't knowingly collect data from children under 13. If you believe I have, contact me and I'll delete it.

Changes

I'll update this page whenever the data practices materially change, and bump the "Last updated" date at the top. For email-list members, I'll send a notice if anything changes that affects you directly.

Contact

Questions, requests, complaints? Use the contact form and I'll get back within 48 hours.