Privacy policy

This policy explains what I collect, why I collect it, and what choices you have. If anything here is unclear, email me.

What I collect

When you submit the contact form, I collect the details you choose to share: name, email, company, website, timeline, challenge, and indicative budget. If you subscribe to my newsletter, or give me your email to use a tool or download something here, I collect your email address for that purpose only.

How I use it

I use contact form details to reply, follow up, and deliver the project if we work together. Getting in touch doesn't subscribe you to anything unless you opt-in separately.

I handle enquiry details under legitimate interest: you contacted me about work, so I need enough information to reply. Newsletter emails are handled on the basis of your consent, which you can withdraw at any time.

How long I keep it

I keep enquiry details only as long as needed to respond and, where relevant, for the duration of our working relationship plus any period required for record-keeping.

Analytics data is held by the providers under their own retention schedules.

If you ask me to delete something you've sent me, I will, unless I'm legally required to keep it.

Cookies

I don't set cookies myself. Any cookies come from the third-party services listed below.

Cookies may record pages visited, time on site, and device information. You can block or delete them in your browser settings at any time, though some parts of the site may not work as expected if you do.

Analytics don't run unless you accept them. Decline, and the analytics tools are never requested.

The only exception is the contact page, where Microsoft Clarity runs either way so I can keep improving the form. Input masking is on, so what you type is not recorded.

Your analytics choice and the game's high score are stored on your device, not in a cookie. To change your analytics choice, use the Cookie settings link in the footer.

Third parties

A few services help run this site and may process limited data on my behalf. Each handles it under its own privacy terms.

Only if you accept analytics: Google Tag Manager and Google Analytics (site usage data), and Microsoft Clarity (session recording and heatmaps)—except on the contact page, as described above.

Whether or not you accept: two visitor counters run for everyone—Cloudflare Web Analytics and Ahrefs Web Analytics. Neither sets a cookie, stores anything on your device, or builds a profile of you. They count pages viewed and where visits came from, and that's all. There's nothing stored to ask permission for, and without them I'd only ever see the people who accept.

Part of the features they belong to: Cloudflare Turnstile checks the contact form isn't being submitted by a bot, and cal.com handles scheduling if you book a call. These load with the contact page whether or not you accept analytics, because the form and the booking widget don't work without them.

Embedded content: some pages embed social media posts, videos, and event listings from third parties. These load in a frame from the provider and may collect browsing data under their own terms, whether or not you interact with them.

Behind the scenes: a hosting and security provider and an email delivery provider keep the site running and handle the messages you send me. If you want to know exactly which providers I use, ask and I'll tell you.

Where your information is processed

Your information may be processed on servers outside your country, including in the United States and the EU.

When I'd share your information

I don't sell your data, and I don't share it for advertising. Beyond the service providers listed above, I'd only disclose your information where I'm legally required to, such as in response to a lawful request from a public authority, or where it's necessary to establish or defend a legal claim.

Your rights

You can ask to access, correct, delete, restrict, object to, or receive a copy of the information I hold about you. Send me a message and I'll action it, within one month at the latest.

Age

This site isn't intended for children. Please don't use it or send me your details if you're under 13.

Changes

If this policy changes, the "last updated" date above will change with it. I won't email you about it, so check back here if it matters to you.