privacy policy

Last Updated: September 30, 2026

This Privacy Policy explains what personal data we collect, why we collect it, how it is used and shared, and the rights available to you depending on where you live.

1. Information We Collect

  • Analytics Data: IP address, device type, browser, approximate location, pages viewed, referral source, and on-site behavior, collected via Google Analytics (GA4).
  • Security/Anti-Spam Data: Behavioral and device signals collected by Google reCAPTCHA when you submit a form.
  • Contact/Form Data: Name, email address, and message content submitted through our contact form.
  • Comments: Name, email address, comment text, and an optional “remember me” cookie if you comment on a post.
  • Newsletter Subscription: Your email address, if you subscribe to updates.
  • Technical/Infrastructure Data: Cloudflare processes your IP address for content delivery, security, and bot mitigation.
We do not intentionally collect sensitive personal data (health, biometric, precise geolocation, racial/ethnic origin, sexual orientation, immigration status, or similar categories) and do not knowingly collect data from children under 13.

2. How We Use Your Information

We use the data above to: operate and secure the site; understand traffic and content performance; respond to messages submitted through our contact form; prevent spam and abuse; and, where applicable.

3. Cookies

Security Cookies: Google reCAPTCHA sets cookies and transmits device/behavioral signals to Google to distinguish human visitors from bots.

Analytics Cookies: Google Analytics (GA4) uses first-party cookies to help us understand how visitors use the Site, including visits, sessions, and interactions with our content.

Your Cookie Choices: We currently do not use a cookie banner. We use cookies for analytics and security purposes, not for marketing or advertising.

4. How We Share Your Information

We share or make personal data available to service providers and website technologies that help us operate, maintain, secure, and provide functionality on the Site. The data processed depends on how each service or feature is configured.
Service / Technology Purpose Data Involved
WordPress Website content management and core site functionality IP address, request information, and user-submitted information where applicable
Elementor Website design, page-building, and form functionality Form submissions and technical or usage information where applicable
Google (reCAPTCHA) Spam and bot prevention Device and behavioral signals
Cloudflare CDN, website security, and DDoS mitigation IP address and request metadata

Do We Sell Your Personal Data?

We do not sell your personal data for money. Some U.S. state privacy laws define “sell” and “share” more broadly, though. Under those laws, a data use can count as a “sale” even when no money changes hands. Whether our tools fall under these rules depends on how we set them up. We do not knowingly sell your data to data brokers. We also do not give your data to any third party so they can market their own products to you.

5. Data Retention

We retain analytics data, contact form submissions, and comment data only as long as we need it for the reasons above. We may also keep it longer if the law requires. After that, we delete it or anonymize it.

6. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal data, including CDN-level security and bot mitigation through Cloudflare. No transmission or storage method is completely secure, and we cannot guarantee absolute security.

7. Children’s Privacy

This Site is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If we learn we have collected such data, we will delete it.

8. Your U.S. Privacy Rights

Roughly 20 U.S. states now have their own comprehensive privacy laws, each with its own applicability threshold based on revenue, traffic volume, or data-sale activity. We extend the rights below to all U.S. residents as a matter of company policy, regardless of which state’s law technically reaches us. Where a specific state imposes a stricter or additional requirement, we have called it out separately below so the baseline does not quietly fall short of the strictest applicable standard.

Rights we provide to all U.S. residents:

  • Access: Confirm whether we process your personal data and access it.
  • Correction: Request correction of inaccurate personal data.
  • Deletion: Request deletion of personal data we’ve collected.
  • Portability: Request a copy of your personal data in a portable format.
  • Opt-out: Opt out of the sale or sharing of your personal data, targeted advertising, and profiling used for decisions with legal or similarly significant effects.
  • Non-Discrimination: We will not deny service, charge different prices, or provide a different quality of service because you exercised any of these rights.

Sensitive Data: We will not process sensitive personal data without your opt-in consent, and — matching Maryland’s stricter standard — we do not sell sensitive personal data under any circumstances, opt-in or not.

How to Exercise Your Rights: Send your request through our contact us page. We will verify your identity before we act on it. We will reply within 45 days. If we need more time, we may take another 45 days. If we decline your request, you can appeal by emailing [email protected]. We will answer your appeal within 60 days.

9. Additional Rights for California Residents

The California Consumer Privacy Act, as amended by the CPRA (the “CCPA”), gives California residents rights beyond the nationwide baseline above.

Note on Applicability: This section is provided regardless of whether we have independently confirmed that the CCPA’s statutory thresholds apply to us.

10. Multi-State Privacy Rights

Residents of certain U.S. states may have additional rights regarding their personal data under applicable state consumer privacy laws. This section applies, where and when the relevant law applies to us, to residents of Alabama, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Vermont, and Virginia (collectively, the “Covered States”).

11. International Data Transfers

Our servers and service providers (including Google and Cloudflare) may process personal data in the United States and other countries outside your home country. Where required, we rely on Standard Contractual Clauses (for EEA-originating transfers) and the UK International Data Transfer Agreement (IDTA) as the legal mechanism for international transfers of personal data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last Updated” date at the top of this page, and by additional notice where required by law.

13. Contact Us

Questions about this Policy or requests to exercise the rights described above can be sent to: [email protected].