What this site collects.

The contact form

What you type into the form is sent to this site's own server, which passes it straight to my email inbox and keeps no copy of its own. It is not stored in a database, not handed to a form company, and not published anywhere. I read it, I reply to it, and it stays in my mailbox. It does not go onto a mailing list, and I will not send you anything you did not ask for.

The message is carried by Amazon's email service, in the same way that any email you send is carried by whoever runs your mail. Nobody else sees it.

If you would rather not use a form at all, email [email protected] directly. It reaches the same place.

The anti-spam check

The contact form runs Cloudflare Turnstile, which checks that you are a person rather than a bot. It sets no cookie, does not track you across sites, and is not used for advertising. Cloudflare receives your IP address and some technical details about your browser in order to make that judgement.

Tracking

This site counts page views using Cloudflare Web Analytics. It records which pages are opened, roughly where in the world from, and how quickly they loaded. It sets no cookie, it does not identify you, it does not follow you to any other site, and it is not used for advertising.

There is no advertising tracker, no session recording and no cookie set by this site of any kind.

Emails I send are not tracked either — no open pixels and no rewritten links. It hurts deliverability and it reads as bulk mail, which it is not.

Third parties

Cloudflare, and only Cloudflare — who host this site. That covers the page counting described above, and the anti-spam check on the contact page. Nothing else: the typefaces are served from this domain rather than from Google, and there is no CDN, no embedded video, no font service and no advertising network anywhere on the site.

That includes pressing send: the contact form posts to this domain, not to anyone else's. The one check on that page is performed by Cloudflare, who host this site — and it sets no cookie and does not follow you anywhere.

Sites I build for clients

A site I build for a business belongs to that business and is covered by whatever policy they publish, not this one. Their form endpoint, their hosting account and their domain are registered in their name — I do not keep copies of their credentials, and I do not retain access after handover.

Asking me about your data

Email [email protected] and I will tell you what I have, or delete it, whichever you would prefer. It is one person and one inbox, so this is a short conversation.