Privacy notice

Information you provide

When you contact us through the website, we receive what you choose to send:

• your name;
• your company or organization;
• your email address;
• your phone number;
• your message.

If you email us, we receive your message and anything it contains.

Technical information

The site and the services that host and protect it process limited technical information needed to deliver pages and keep them reliable.

We run privacy-respecting analytics and standard infrastructure logs:

• Umami Cloud measures site usage through a same-origin relay at /u. It sets no cookies. Each note you send leaves one sessionStorage entry, tomshley.umami.sent. followed by that note’s id, so its confirmation isn’t counted twice; the entries clear when you close the tab.
• Cloudflare Web Analytics measures visits with a beacon that sets no cookies.
• Hosting and CDN logs — our hosting provider and Cloudflare record the technical details their platforms need to serve and protect the site, such as your IP address, browser type and the pages requested.

• Reply to your request and follow up on a conversation you started.
• Operate, secure and improve the website, including stopping duplicate or abusive submissions.
• Keep a record of the requests we receive.
• Comply with the law and protect our rights.

We don’t sell personal information, and we don’t use it for targeted advertising.

Service providers

Service providers host and protect the website and deliver the email and text notifications we receive about contact requests.

A contact request goes to our inbound contact server, which hands it to our notification service; that service emails and texts it to us so we can reply. The providers that carry this are:

• Google Cloud, which hosts the site and the contact services;
• Cloudflare, which provides DNS, CDN and the analytics beacon;
• Confluent, which carries each contact request from our inbound contact server to our notification service;
• Umami, which provides site analytics;
• Twilio, which delivers the notification email and text messages to us.

Each provider handles the information only to run its part of the service, under its own privacy terms.

Other disclosures

We may also share information when the law requires it, when needed to protect our rights or the safety of others, or as part of a business transfer such as a merger or sale — in that case the recipient takes on this notice’s commitments.

Retention

We keep contact requests and applications for as long as reasonably necessary to reply to you, for ordinary business recordkeeping, to meet contractual or legal obligations, or to protect our rights. How long depends on the information and the business relationship involved.

The copy of a contact request that Confluent carries to our notification service is deleted after 30 days. Provider logs are kept for each provider’s stated period.

You can ask a question about personal information you gave us, ask us to correct information that is inaccurate, or ask us to delete it where appropriate, by emailing [email protected].

We may keep information when reasonably necessary for legitimate business, contractual, security or legal purposes.

Depending on where you live, including California, the EU or the UK, you may have additional rights — for example, to restrict or object to some processing, or to receive a copy of your data. Email us to use any of them.

Other websites

The site links to other websites, such as our open-source repositories. Their own privacy policies apply.

We may update this notice from time to time. When we do, we’ll change the effective date above.

If a change is material, we’ll note it at the top of this page.