Privacy Policy

What I collect

I use PostHog for privacy-focused analytics. It records pageviews, click events, page URL, browser type, and screen size. A short-lived anonymous identifier is generated server-side from your browser's user-agent and a daily-rotating salt; it resets every 24 hours and is not linked to you personally. No cookies are used for analytics, IP addresses are not retained in analytics data, and analytics identifiers reset every 24 hours.

The site is hosted on Vercel, which processes standard server access logs (including IP address and user-agent) for the purpose of delivering the site and protecting against abuse.

I do not collect names, emails, accounts, or any other information you don't actively send me.

If you email me, that message (and your email address) is stored in my Gmail inbox and used only to respond to your inquiry.

Where the data is stored

• Analytics: Stored in the European Union (Frankfurt) on PostHog Cloud EU. PostHog Inc. is a US-based processor and may access this data from the United States for operational purposes using appropriate safeguards for international data transfers, including standard contractual protections where applicable.
• Hosting/access logs: Vercel Inc. processes these in the United States under the EU-US Data Privacy Framework.

Both providers are bound by Data Processing Agreements with me.

Why (legal basis)

Legitimate interest under GDPR Art. 6(1)(f) — to understand which content is useful and to operate the site reliably. The analytics data is designed to minimize identification and is not used for profiling, advertising, or automated decision-making.

How long

Analytics: up to 12 months. Server access logs: per Vercel's default retention (typically days to weeks).

Your rights

You have the right to access, correct, erase, restrict, or object to the processing of your personal data, request data portability, and lodge a complaint with your local data protection authority.

To exercise these rights, contact me at BrendanrKeaton@gmail.com. I am the data controller for this site; You may contact me directly regarding any privacy-related request.

Note on anonymous data: Because analytics data is not linked to any identifier I can match to an individual, I generally cannot fulfill access or erasure requests for past visits (GDPR Art. 11). You can prevent any future tracking by using your browser's tracking protection or installing an ad/tracker blocker.

Changes

If I change how analytics or hosting work on this site, I'll update this page and bump the date above.