Privacy
This is a personal site with two forms on it. Three other companies are involved, and this page says exactly which, what each one sees, and how to switch two of them off.
Cookies, and what happens before you answer
On a first visit the page loads from this domain only. No third party script is on it, no cookie is set, and no request goes to Google, to a font provider, or to anyone else. The cookie panel then asks you about two categories, both off until you turn them on.
The only thing kept in your browser without asking is the answer itself, stored locally so the panel does not ask again on the next page. It never leaves your device. Clearing your browser data removes it and the panel comes back.
Analytics
If you allow the analytics category, Google Analytics 4 loads and records which pages get read and roughly where visitors come from. That means Google sets cookies in your browser and receives your IP address. Advertising signals, ad personalisation and ad storage are switched off permanently in the configuration, because there is no advertising on this site and never will be.
I use it to see whether any of this is working. There is no profile of you, no remarketing list, and nothing joined up with anything else. Turning the category back off removes the script and deletes the cookies it set.
The spam check
Both forms are protected by Google reCAPTCHA v3, which scores whether a submission looks like a person or a script. There is no puzzle and no checkbox, but it does set Google cookies and read signals from your browser, so it sits behind its own consent category.
If you do not allow it, the forms are closed rather than unprotected. That is a deliberate choice: an unprotected contact form on a public site fills with rubbish within days. The email address below reaches me just as well, and so does LinkedIn.
Use of reCAPTCHA is subject to the Google privacy policy and terms of service.
What the forms collect
The contact form asks for your name, email address, company, role title, a description of the role, and optionally a compensation band. The question form on a project page asks for your name, email address and your question, and records which project you were reading. Every field is one you fill in yourself.
When you send one, the message goes to my own server, which passes it to Resend, an email delivery service, which delivers it to my inbox. Resend processes the message on my instructions and holds a delivery log. Your IP address is used at that moment for rate limiting and for the spam score, and is not stored afterwards.
That information is used to reply to you and for nothing else. It is not sold, shared, added to a mailing list, or used to market anything to you. If we do not end up working together, I delete the message.
What the site still does not do
- No advertising, no advertising networks, no remarketing.
- No heatmapping and no session recording.
- No newsletter list, and no account to create.
- The typeface is served from this site rather than from Google, so loading a page sends no request to a font provider.
- My email address and phone number are still not published in the page source, which means no third party is reading them from it.
Who else is involved
- Netlify, the host. Like any web host their servers keep standard request logs, which can include your IP address, the pages you requested and your browser type. Those logs are theirs, kept for security and operational reasons. I do not read them and I have no dashboard built on them.
- Resend, for delivering what the forms send. Only triggered when you press send.
- Google, for analytics and the spam check, and only with your consent.
- LinkedIn, WhatsApp and Calendly, if you follow one of those buttons. Once you do, you are on their service and their policy applies. Booking a call means giving Calendly your name and email, which I then see in the invitation.
How long anything is kept
Messages stay in my inbox while a conversation is live and are deleted once it is clearly over. Analytics data follows Google's retention setting, currently fourteen months. Your cookie answer stays in your browser until you change it or clear your browser data.
Your rights
You can ask what I hold, ask for a copy, ask for it to be corrected, or ask for it to be deleted, and I will do it. You can withdraw consent at any time from the cookie panel, and withdrawing is as easy as giving it: one button. There is no account to close and no database to unsubscribe from, so in practice a deletion request means deleting an email thread.
Getting in touch about this
Use the contact form if the spam check is enabled, or write to the address below. Press the eye to show it. I reply within two working days.
The contact point for anything on this page.
Hidden until you ask for it. Nothing in this page's source contains an address, so the usual harvesting bots have nothing to scrape.
Last updated September 2026. If this policy changes, the date changes with it.