Privacy
What this site collects
This site collects almost nothing. Here is exactly what it does collect, where it goes, and how to have it deleted.
Last updated
- No cookies, no analytics, no tracking pixels, no advertising.
- The only personal data collected is what you choose to type into the contact form.
- Nothing is sold, rented, or shared with advertisers.
- Your light or dark preference stays in your own browser.
Who is responsible for this data
Liyona Johny, acting as an individual rather than a company. In the language of the UK and EU rules below, I am the data controller: decisions about the small amount of data described here are mine, and requests about it come to me through the contact form on this site.
The site is built as static files and hosted by Netlify, which serves the pages and handles contact form submissions as my processor. I am based in the United States and Netlify stores submissions there, so a message sent from the United Kingdom or the European Union is transferred to the United States. That transfer is covered by the standard contractual clauses in Netlify terms, and the only data involved is what you choose to type into the form.
What the contact form collects
The form at /contact/ asks for four things: your name, your email address, the topic you pick from the list, and your message. Nothing else is collected with it, and there are no hidden fields beyond a spam trap that only automated submissions fill in.
That data is used for one purpose, which is replying to you. It is not added to a mailing list, because there is no mailing list.
Where those messages go
Submissions are stored in the Netlify dashboard for this site and a copy is emailed to me. Netlify processes them on my instructions and does not use them for its own purposes. Netlify is a United States company, so your message is stored there.
No other service receives the form data. There is no customer relationship tool, no analytics platform, and no third-party form provider involved.
How long messages are kept
Messages are kept while the conversation is still useful, and deleted within twelve months of the last reply. If you ask me to delete one sooner, I delete it from both the dashboard and my inbox.
No analytics and no tracking
There is no Google Analytics, no advertising pixel, and no session recording on any page. This site sets no cookies at all.
Every script, style, font, and image is served from this domain. No third-party code runs in your browser here, so no other company learns that you visited.
What your browser stores
One entry, named theme, holding the word light or dark when you use the theme toggle. It lives in your browser local storage, is never sent to any server, and is removed when you clear site data for this domain.
Server logs
Like any web host, Netlify records ordinary request logs: the IP address that made the request, the time, the page asked for, and the browser user agent. Those logs exist so the site can be delivered and abuse can be blocked, they are held by Netlify on its own retention schedule, and I do not use them to build a profile or link them to anything from the contact form.
The live speed test
The performance page has an optional button that measures this site with Google PageSpeed Insights. Your browser never contacts Google. The click goes to a function on this domain, that function asks Google about the address of this site, and only the score comes back.
The request carries no information about you: not your IP address, not your browser, not the page you came from.
How the site is secured
Every page is served over HTTPS, and a strict transport security header tells your browser to refuse an unencrypted connection to this domain for a year after your first visit. A content security policy blocks any script that is not part of this site, which is what makes the promise above enforceable rather than a matter of trust.
Your rights
If you are in the UK, the EU, or another place with similar law, you can ask what personal data I hold about you, ask for a copy, ask me to correct it, and ask me to delete it. Send the request through the contact form from the same email address you wrote to me with, so I can tell it is you. I will answer within thirty days, and usually the same week.
If you think I have handled your data badly, you can complain to your national data protection authority.
Changes to this page
The date above is the last time this page changed. If what is collected ever changes, this page changes first and that date moves with it.
Anything here unclear, or want a message deleted? Ask through the contact form and I will sort it out.