The long version
Privacy policy
Analytics
I use PostHog (hosted in the United States) to understand how the site gets used. When it's running, it records things like the pages you view, links and buttons you click, the page that sent you here, your browser, operating system, device type and screen size, and an approximate location (city and country) estimated from your IP address. The IP address itself is then thrown away, not stored.
Visits are anonymous. I don't ask who you are, and I don't build a profile tied to your name or email. PostHog gives your browser a random ID so a return visit can be told apart from a new one.
I may also record session replays: a reconstruction of how a page was used (scrolling, mouse movement, clicks) so I can spot what's confusing or broken. Anything typed into a form is masked and never recorded.
Cookies and storage
PostHog stores its random ID in a first-party cookie and your browser's local storage. The site itself also remembers two settings in local storage: whether you picked light or dark mode, and whether you've opted out of analytics. Those two never leave your browser.
There are no advertising or social-media tracking cookies.
The contact form
If you send a message, the form collects your name, email, company (if you give one) and your message. It's delivered by Formspark, which passes it on to me. I use it only to reply to you, and you won't be added to any mailing list.
Other services
The site is hosted on Cloudflare, which handles standard request information (such as IP address and browser) to deliver pages and keep the site secure. Fonts load from Google Fonts, so your browser contacts Google to fetch them.
Some pages link to other sites, like client projects or press. Once you follow a link, their privacy policies apply, not this one.
Sharing
I don't sell, rent or trade your information. The only people who handle it are the services named on this page, doing their part to run the site, or anyone the law requires me to share it with.
How long it's kept
Analytics data is kept for up to a year, and session replays for about a month, then deleted. Contact-form messages are kept for as long as the conversation is useful, and I'll delete yours if you ask.
Your choices
- Use the opt-out switch at the top of this page. It's remembered in this browser.
- Turn on Do Not Track or Global Privacy Control. If your browser sends either one, analytics don't load at all.
- Block or clear cookies and site data in your browser settings. The site works fine without them.
- Ask me what I have about you, or ask me to correct or delete it, through the contact form. Depending on where you live, you may have legal rights to do this, and I'll honor these requests either way.
Kids
This site isn't aimed at children under 13, and I don't knowingly collect their information. If you think a child has sent me something, let me know and I'll delete it.
Changes
If this policy changes, I'll update it here and change the date at the top. This version took effect on October 2, 2026.