What we collect
When you use our contact form or newsletter signup, we collect:
- Email address - So we can reply or send newsletters (only if you opted in)
- Name - Optional, helps us personalize replies
- Message content - What you send in the contact form
- Newsletter preferences - Which topics you want updates about
- IP address - Temporarily by Cloudflare Turnstile for spam prevention (deleted after 30 days)
- Browser data - Standard analytics and security data
Why we collect it
We're not building a data empire. We collect this stuff for practical reasons:
- Contact responses - So we can actually reply to your messages
- Newsletter delivery - To send emails you explicitly requested
- Spam prevention - Turnstile checks bots vs humans at the door
- Security - To prevent abuse and attacks on our infrastructure
How we use it
Simple and transparent:
- Reply to messages - When you use the contact form, we email you back
- Send newsletters - Only if you subscribed, only the topics you selected
- Prevent spam - Turnstile verification keeps bots out
- Security monitoring - To detect and block malicious activity
We don't sell your data. We don't use it for targeted advertising. We don't share it with third parties for marketing. Ever.
Who we share it with
We work with trusted services to help run the site:
- HubSpot - Stores your contact info and sends newsletters. They're our data processor, not a data seller.
- Cloudflare - Runs Turnstile (captcha) and protects the site. They see IP addresses temporarily for security.
That's it. No ad networks. No data brokers. No "partners."
Your rights
You're in control. Here's what you can do:
- Access - Email me@erprashant.com to see what data we have on you
- Delete - Same email, tell us to delete your data, and it's gone within 30 days
- Export - Want your data in a file? We'll send it over
- Unsubscribe - One-click unsubscribe in every newsletter email
- Modify preferences - Change what topics you receive anytime
Data retention
We keep your data as long as it's useful:
- Contacts - Until you delete, unsubscribe, or request removal
- Turnstile logs - 30 days max, then auto-deleted
- Form submissions - Stored in HubSpot as long as the contact exists
If you close your account or request deletion, we wipe everything. No backups kept.
Security
We take security seriously but aren't making legally binding promises:
- HubSpot encryption - Data encrypted in transit and at rest
- HTTPS only - Cloudflare protects all connections
- No raw passwords - We never see or store password data
- Access control - Only humans with legitimate access can view your data
Children's privacy
This site isn't directed at children under 13. If we discover we've collected data from someone under 13, we'll delete it immediately. Parents, email me@erprashant.com if you have concerns.
International transfers
HubSpot is US-based. If you're in the EU, your data crosses the Atlantic. HubSpot has Standard Contractual Clauses (SCCs) in place for GDPR compliance. Your data gets the same protection whether it's in Dublin or Delaware.
Changes to this policy
We might update this policy as the site evolves. We'll note the date at the bottom. Material changes? We'll announce them. Non-material tweaks? No need to spam you about it.
Contact us
Questions, concerns, or data requests? Email me@erprashant.com. We respond to privacy requests within 30 days, usually much faster. Very hard work™ means taking privacy seriously.