Privacy policy

Limited to what's needed to respond to your inquiry and operate the site. That means: the fields you submit on contact forms, anonymous analytics events (page views, button clicks), and your IP address as part of standard server logs.

We do not run user accounts on the public site. You don't sign in to read content here.

Two purposes: (1) replying to you and scoping potential engagements, and (2) understanding which parts of the site are working well enough to keep, and which need rework. Analytics are aggregated.

The site is built on a small stack of vendors. Each is named here, with what data they touch:

• Vercel — hosting and CDN; sees request metadata.
• Supabase — Postgres database; stores form submissions only.
• Resend — transactional email; sees inbox + name fields.
• PostHog — product analytics; anonymized session events.
• Google Analytics 4 — anonymized traffic counts.

You can ask for a copy of any data we hold on you, ask us to delete it, or correct anything that's wrong. Send the request through the contact form and pick 'Other' as the topic.

We use a minimal set of first-party cookies for analytics (PostHog and GA4). No advertising cookies, no third-party tracking pixels. You can disable analytics in your browser; the site still works.

Contact form submissions are retained for 24 months in case the conversation re-opens, then deleted. Analytics events are aggregated and have no personal identifiers attached after 14 months.

Privacy questions go through the contact form — pick 'Other' as the topic and mention 'Privacy' in the message. We respond within one business day.