I collect almost nothing, and I share none of it.

What I collect

What you type into the contact form: your name, your company, your email address, and whatever you choose to put in the message. Attached to that, automatically, is the country your connection is coming from, which arrives with your message and is explained in the next section. That is the complete list. I do not ask for anything I do not need in order to answer you, and if you never write to me, I hold nothing about you at all.

What the form checks before it accepts your message

Three automated checks run when you press send, and you should know about all of them.

Where you are connecting from. I do not take clients in every country, so the form looks at the country your connection comes from and will decline to accept a message from a region I do not serve. That is a country and nothing more precise. It tells me which nation your connection appears in and nothing else about where you are.

A hidden field that people never see. The form contains a decoy box that is invisible in a browser. Automated spam fills it in, real visitors cannot. If it comes back filled, the message is discarded.

A human check, if one is switched on. If I turn on a challenge to keep automated abuse down, confirming you are a person involves sharing your IP address with the security provider that runs that check, for that moment, for that purpose. It is not used to build a profile of you and I do not keep it.

What I use it for

One thing: to read your note and reply to it. If that conversation turns into work, the same details become the beginning of your client record. That only ever happens because you reached out first. I do not build profiles, I do not score or segment anyone, and I will never add you to a mailing list.

I never sell or share it

Full stop. Your information is not sold, rented, traded, or handed to a marketing partner, because I have none. It exists so I can do the work you asked about, and it goes nowhere else.

I never name my clients

You will not find a client list, a wall of logos, or a page of references anywhere on this site, and that is deliberate. I do not publish who I work with, and I will not confirm to anyone that you are a client. That is yours to share if you ever want to, and mine to protect otherwise. Knowing which businesses depend on a given engineer is the sort of detail worth keeping off the open web. I protect my clients' names for the same reason I would protect yours.

Cookies, and the measurement I cannot fully switch off

This site runs no advertising, no marketing trackers, and no profiling of any kind. It sets no cookie of its own. The only cookie you might ever receive is a short-lived security token, and only if the protection in front of the site challenges your connection first. It exists to save you from being challenged again on every page, and it does not identify or follow you.

Being straight about the rest: the platform hosting this site adds its own small measurement script to every page, and I have not found a way to remove it on this plan. It sets no cookie, it does not follow you to any other site, and it does not tell me who you are. It counts page loads and how quickly pages render, in aggregate. The same platform keeps ordinary connection logs, including IP addresses and timestamps, so it can absorb attacks and stay online. I run no analytics of my own on top of that, and nothing here follows you once you close the tab.

I do not publish the tools behind the work

Delivering a message involves the ordinary plumbing any website relies on to move and store mail. I deliberately do not name those providers here. Publishing the exact stack a business runs on is a gift to anyone looking for a way in, and reducing that kind of exposure is a large part of what I do for a living. If you are evaluating me and your process needs a written list of every service that touches your data, I will give it to you directly as part of that conversation, and it still does not go on this page.

How long I keep it

If you write to me and we never end up working together, twelve months. Then it is deleted. An inquiry that went nowhere has nothing to substantiate and no reason to outlive the conversation, so keeping it longer would be storing risk for no benefit to either of us.

If we do work together, seven years after the engagement ends. That figure comes from the rules that outlast the work. Federal tax records can be examined for up to six years, and Ohio allows six years to bring a claim on a written contract. Seven clears both with room to spare. After that it goes, and the only things that survive are the specific records I am separately required by law to hold.

When the law is involved

The only circumstance in which your information leaves my hands is a valid legal order, such as a subpoena or a court order. Even then I release the narrowest slice the order actually demands and not a byte more. I will not volunteer anything to anyone, and I will not pretend to promise the impossible, because a lawful order is a lawful order. What I can promise is that nothing less than one will move your data.

Who this is for

I work with businesses and public entities in the United States. The contact form is meant for people considering that work or already doing it.

Your say over your own data

Ask me what I hold about you, ask me to correct it, or ask me to delete it, and I will, setting aside the narrow records I am legally required to keep. Because I collect so little, there is rarely much to discuss, which is rather the point.

Reaching me about privacy

Any question about this policy or about your information goes to [email protected]. If I change how any of this works, the revised policy will carry a new effective date at the top.