# Privacy Policy

Type: post
URL: https://www.jonathant.com/privacy-policy/
Published: 2019-03-18
Updated: 2026-08-09
Author: Jonathan Tarud

---

## Who we are

This is the personal blog of Jonathan Tarud. The website address is
https://www.jonathant.com.

The site is a static one: there are no user accounts, no comments, no logins,
and nothing you can upload. The only place it collects anything from you is the
contact form, and the only ongoing collection is anonymous traffic measurement.
The specifics are below.

## Hosting

The site is served as static files from [Fastmail](https://www.fastmail.com)
file storage. Like any web server, Fastmail's receives your IP address and
browser user agent as part of serving a request, and may log it for operational
and security purposes.

## Analytics

The site uses [Google Analytics 4](https://policies.google.com/privacy) to count
visits and see which posts get read. This sets cookies in your browser and sends
Google your IP address (which Google truncates), page URL, referrer, and general
device and browser information. It is used only in aggregate — to know that a
post was read some number of times, not to identify you.

No advertising or remarketing features are enabled, and the data is not sold or
shared with third parties for advertising.

If you would rather not be counted, any content blocker or the
[Google Analytics opt-out add-on](https://tools.google.com/dlpage/gaoptout)
will prevent it, and the site works exactly the same with it blocked.

## Contact form

The contact form on the [About](/about/) page is handled by
[Web3Forms](https://web3forms.com/privacy), which receives the name, email
address, and message you type in and forwards them to me by email. That data is
used to read and reply to your message. It is not added to a mailing list and
not used for anything else.

The form is protected against automated abuse by
[hCaptcha](https://www.hcaptcha.com/privacy), which collects information about
your browser and interaction with the challenge in order to tell people from
bots.

Both are third parties with their own privacy policies, linked above.

## Cookies

The site itself sets no cookies. The only cookies come from Google Analytics
and, on the About page, hCaptcha — both described above.

## Embedded content

Posts occasionally embed content from other sites, such as YouTube videos.
Embedded content behaves as though you had visited that site directly: the
provider can see your request and may set its own cookies or tracking. Those
providers' policies apply to that content, not this one.

Outbound links in posts are just links. Following one takes you to a site with
its own policies.

## How long data is kept

Messages sent through the contact form stay in my email until I no longer need
them. Analytics data is retained according to the retention period configured in
Google Analytics.

There is nothing else — no accounts, no profiles, no comment history.

## Your rights

You can ask me what personal data I hold about you, ask for a copy of it, or ask
me to delete it. In practice that means any email you have sent me. Get in touch
through the [About](/about/) page.