Privacy

The short version

This is a personal portfolio. It has no accounts, no login, and no comments, and there is nothing here to buy. It does, like most business sites, try to work out which companies are reading it — the rest of this page is the honest account of how.

Analytics

Page views and on-page actions are recorded with PostHog. It sets a cookie, so a second visit is recognized as the same browser rather than counted as a new one, and it records what you clicked: which pages, which sections you opened, whether you reached for the contact button.

PostHog also records sessions — a replay of scrolling and clicking on the page, so I can see where the site is confusing. Anything typed into an input is masked out of those recordings.

The calculator on the contact page is the only place with anything to type. The numbers you put into it stay in your browser: nothing you type there is sent anywhere, and the only thing recorded is which fields were touched, not what was in them.

Identifying visitors

This site runs Apollo's website visitor tracker, which takes an anonymous visit and tries to match it against their own dataset of companies and professional profiles. When it matches, I am told who visited and where they work.

That is the plain version and it is worth being plain about: if you are reading this from a work network, there is a reasonable chance I can see your name and your employer without you having told me. I did not collect that information and I cannot correct it — Apollo holds it. If you would rather they did not, their removal form is atapollo.io/privacy-policy/remove, and a tracker blocker stops it here as well.

Fonts and assets

The typeface, stylesheets, scripts, and images are all served from this domain, and the analytics script is bundled rather than fetched from a CDN. Nothing is loaded from a font host, so no third party learns you were here just from the page rendering, with one exception: the video pages, below.

Videos

Each page under Thoughts plays one of my YouTube videos in YouTube's own player, embedded from youtube-nocookie.com, the privacy-enhanced mode YouTube offers for this. The player loads with the page, so YouTube knows the page was opened. YouTube says that in this mode it does not store information about you unless you play the video; once you do, what you watch is handled by YouTube under Google's privacy policy rather than this one.

The Thoughts library page itself loads nothing from YouTube. Its thumbnails are copies served from this domain.

Third parties

Four, and that is the whole list: PostHog for analytics, Apollo for the identification above, YouTube for the videos under Thoughts, and — on the contact page only — Cal.com, which powers the "Book a call" button. Cal’s script loads when you open that page, so they know you visited it even if you never click, and anything you enter to book a time is handled by Cal under their privacy policy rather than this one.

There is no chat bubble, no social embed beyond those videos, and no advertising pixel, and nothing else on any page contacts anybody but this server.

Hosting

The site is hosted on Vercel, which keeps standard server request logs including IP addresses, as any web host does.

Questions

Anything at all — including "take me out of your analytics" or "delete what you have on me", both of which I will do:jack@woodwalker.co.