What this site collects.

The contact form

What you type into the form is sent to this site's own server, which passes it straight to my email inbox and keeps no copy of its own. It is not stored in a database, not handed to a form company, and not published anywhere. I read it, I reply to it, and it stays in my mailbox. It does not go onto a mailing list, and I will not send you anything you did not ask for.

The message is carried by Amazon's email service, in the same way that any email you send is carried by whoever runs your mail. Nobody else sees it.

If you would rather not use a form at all, email [email protected] directly. It reaches the same place.

The anti-spam check

The contact form runs Cloudflare Turnstile, which checks that you are a person rather than a bot. It sets no cookie, does not track you across sites, and is not used for advertising. Cloudflare receives your IP address and some technical details about your browser in order to make that judgement.

Tracking

There are no advertising trackers, no third-party analytics scripts, no session recording and no cookies set by this site. If I add basic traffic counting later it will be a privacy-respecting one that does not identify you, and this page will say so.

Emails I send are not tracked either — no open pixels and no rewritten links. It hurts deliverability and it reads as bulk mail, which it is not.

Third parties

There are none on this site. The typefaces are served from this domain rather than from Google, there is no CDN, no embedded video, no font service and no analytics provider. Loading a page here contacts exactly one server: this one.

That includes pressing send: the contact form posts to this domain, not to anyone else's. If the anti-spam check is switched on, that one check is performed by Cloudflare, who host this site — and it sets no cookie and does not follow you anywhere.

Sites I build for clients

A site I build for a business belongs to that business and is covered by whatever policy they publish, not this one. Their form endpoint, their hosting account and their domain are registered in their name — I do not keep copies of their credentials, and I do not retain access after handover.

Asking me about your data

Email [email protected] and I will tell you what I have, or delete it, whichever you would prefer. It is one person and one inbox, so this is a short conversation.