legal

Privacy Policy

Last updated June 18, 2026.

This is a personal site for Justin Edwards โ€” writing, a podcast, and a way to get in touch. I keep data collection to the minimum needed to run it, and I don't sell it. Here's exactly what happens.

what I collect

Analytics. I use Google Analytics 4 to understand traffic (pages viewed, rough location, device, referrer). GA4 sets cookies and processes your IP address. See the region-specific rules below for when it loads.

Newsletter. If you subscribe, the form is handled by Kit (formerly ConvertKit). Kit stores your email address and basic subscription/attribution data so I can send the newsletter. Unsubscribe in one click, anytime.

Contact form. When you send a message I receive your name, email, chosen topic, and message text. It's checked by Cloudflare Turnstile (a privacy-friendly spam filter that does not set advertising cookies) and delivered to me by email via Amazon SES. I use your email only to reply.

Security & delivery. The site is served through Cloudflare and Amazon S3. Their servers process your IP address transiently to deliver pages, block abuse, and determine your region for the rules below. I don't store your IP address in contact messages.

who I share it with

I do not sell or share your personal information for money or for cross-context behavioral advertising. Data is processed only by the service providers that make the site work:

  • Google (Google Analytics) โ€” traffic analytics
  • Kit / ConvertKit โ€” newsletter delivery
  • Cloudflare โ€” content delivery, spam protection (Turnstile), and region detection
  • Amazon Web Services (S3, SES) โ€” hosting and contact-form email delivery

Each processes data under its own privacy policy. I don't hand your data to anyone else.

region-specific rules

European Union / EEA / UK / Switzerland. Analytics and the newsletter script do not load until you accept them on the consent banner. You can change your mind anytime via "Your Privacy Choices" below. Legal bases: consent (analytics, newsletter) and legitimate interest (security, replying to your messages). You can withdraw consent, request access, correction, deletion, or portability of your data, object to processing, and lodge a complaint with your data protection authority.

California. I do not sell or share your personal information, so there's nothing to opt out of on that front. Analytics still runs by default, but you can opt out at any time, and I honor the Global Privacy Control (GPC) browser signal automatically. California residents may request to know, delete, or correct their personal information, and I won't discriminate against you for exercising those rights.

your privacy choices

Turn analytics and newsletter scripts on or off for this browser at any time:

To make a data request (access, deletion, correction), use the contact form and pick "Something else." I'll respond within the timeframe the law requires.

retention & other notes

Newsletter data is kept until you unsubscribe. Contact messages live in my email until I clean them out. Analytics data follows Google's GA4 retention settings.

This site isn't directed to children under 16, and I don't knowingly collect their data. I may update this policy; material changes will be reflected by the "last updated" date above.