Privacy

Last updated and reviewed on Sep. 21, 2026.

Table of contents

1. What data we collect
2. How we use your data
3. Where we keep your data
4. How long we keep your data
5. With whom we share your data
6. Contact
7. Updates
8. Changelog

1. What data we collect

Here are the technologies we use, why we chose them, and what data they collect from you. Knowing this lets you make decisions about how you engage with us.

1.1. Website

Our website is hosted by DigitalOcean in Atlanta, GA (USA). We chose DigitalOcean because they own and operate their own hardware, and we've used them for personal projects for years without issues.

We're using DigitalOcean's app platform, which uses Cloudflare as part of its infrastructure. Cloudflare sets a cookie called __cf_bm to identify and mitigate malicious bot traffic. It contains an encrypted session identifier and expires after 30 minutes of continuous inactivity.

When you visit our website, we have no idea. We don't use third-party trackers, and we don't have any forms that solicit data.

1.2. Email

Our email provider is Tuta, based in Germany. We chose Tuta because data is encrypted at rest, there are no embedded ads or trackers, and their email clients are open source. And because our founder spricht ein bisschen Deutsch.

When you email us, we can see your name, your email address, your avatar (if your email provider supports it), any email headers included by your provider or client, which email provider you're using, and any data you voluntarily share.

1.3. Signal

Signal is a messenger that also supports voice and video calls. We chose Signal because all communications are end-to-end encrypted, it's free and simple to use, and there are no embedded ads or trackers.

When you message us on Signal, we can see your name, your avatar (if you uploaded one), your phone number (unless you hide it in privacy settings), your about description (if you shared one), your username (if you registered one), and any data you voluntarily share.

1.4. Matrix

Matrix is a distributed communications platform. We chose Matrix because messages, voice, and video calls are end-to-end encrypted, it supports talking to multiple people at once, and it uses an open protocol.

Our account is registered on an instance managed by the Matrix.org Foundation.

When you message us on Matrix, we can see your username, the instance your account belongs to, your avatar (if you uploaded one), and any data you voluntarily share.

1.5. Mastodon

Mastodon is a distributed social platform. We chose Mastodon because it doesn't use an algorithm that decides what you see and don't see, and there are no embedded ads or trackers.

Our account is registered on an instance managed by the PHP Community Foundation.

When you engage with us on Mastodon, we can see your public profile, the instance your account belongs to, whether you boost, quote, or favorite one of our posts, and any data you voluntarily share.

Do keep in mind that Mastodon is primarily a public, social platform, so even if you privately reply to us, your messages are not end-to-end encrypted.

2. How we use your data

Regardless of how you share your data with us, we only use it for its intended purpose. To have a conversation. To work on a project together. To complete a transaction. You get the idea.

Beyond that purpose, we don't do anything with your data. We don't analyze it, build profiles from it, feed it into AI tools, or hand it to third parties.

Correspondence stays on the platform where it took place. For example, we wouldn't copy your email into Matrix unless we agreed to move the conversation there. And we wouldn't upload a document you sent us to our website.

Separately, we may keep working records tied to our relationship, such as a contact entry, a contract, or an agreed deliverable, but use them for nothing but the work itself.

3. Where we keep your data

Aside from the technologies in section 1, we keep your data in the following places.

3.1. Local Devices

Our computers run on Fedora with full disk encryption, and phones on GrapheneOS with filesystem and metadata encryption using a hardware-backed key.

4. How long we keep your data

We keep your data indefinitely. Correspondence, because we don't have a mechanism to automatically and reliably delete it at set intervals. Working records, because they document the work we've done together.

That said, if you want something deleted, email us. We'll acknowledge receipt, ask for more information if needed, and if there's no legal hold, delete what we directly control within three business days. Then we'll respond to confirm what we deleted.

5. With whom we share your data

Any data you share with us, stays with us and the technologies listed in section 1 and section 3.

We don't sell, trade, or share your data with anyone else.

If we change technologies, we'll pick ones that meet or exceed our standards, and we'll update section 1 and section 3 accordingly.

Contact

If you have questions or concerns about this policy, or want your data deleted, email us at [email protected]. We aim to respond within a business day or two.

Updates

Any time we make changes to this policy or review it for accuracy, we will update the date at the top of this page and document any changes in the changelog below.

Changelog

• Sep. 21, 2026. Published privacy policy.