Privacy Policy

• How you use the site. Which pages and sections you read, where you came from, how long you stay, and your approximate location, device, and browser, through Google Analytics (below).
• Visit counts. Cloudflare Web Analytics counts visits without cookies.
• What you send me. Through the contact form: your name, email, company (if you give one), and your note, plus your country and browser type. Through the newsletter form: your email, plus your country and the campaign tag on the link that brought you here, if there was one.
• Abuse checks. When you send the contact form, your IP address goes to Cloudflare Turnstile to check for bots. On both forms, a counter tied to your IP address stops repeat sends. The counter expires after two minutes.

I do not ask for sensitive information, such as health, financial, or government ID details.

I use Google Analytics 4. In the UK, the EU, the EEA, and Switzerland, it runs after you accept and not before. Elsewhere it runs by default.

It sets first-party cookies named _ga and _ga_ followed by an ID, which last up to two years. Google receives your IP address to work out an approximate location; GA4 does not store IP addresses. Google signals and advertising features are off.

If I share a deliverable with you, you sign in to view it. If you sign in with Google, Google shares your name, email address, and profile picture. I use only your email address, to confirm the report was shared with you and to verify that you've been able to access the materials. You can also sign in with a one-time code sent to your email.

For verification, I keep the time and method of your last sign-in and the time you last opened a report, for as long as the report is shared with you. Each open is also recorded for 7 days. Failed sign-in attempts are also logged for 30 days, including the email address, when it belongs to an organization I share reports with. Cloudflare maintains its own record of each sign-in, with the IP address, for a day. I copy no IP address from it and use none of this for anything else.

You stay signed in for up to 30 days.

To reply to your note and follow up on it, to send the newsletter you signed up for, to see which parts of the site get read so I can improve it, and to keep the site and the contact form safe from abuse. I do not sell personal information, I do not use it for advertising, and I do not make automated decisions about you.

For visitors in the UK, the EU, the EEA, and Switzerland: analytics and the newsletter rely on your consent, which you can withdraw at any time. Replying to your note relies on my legitimate interest in answering you, or on steps you ask me to take before working together. Visit counts and bot checks rely on my legitimate interest in running a secure site.

Cloudflare hosts the site, stores contact messages and newsletter signups, sends my email, and runs Turnstile, which checks the contact form for bots. Google runs Analytics and hosts my inbox. Substack runs the newsletter, and its own privacy policy covers your email from there. Other service providers I use to run the site and handle messages see your information only to do that work for me. Beyond them, I share personal information only when the law requires it.

Google keeps analytics event data for 14 months. I keep contact messages until you ask me to delete them or I no longer need them. I keep my own copies of newsletter signups for 90 days, or until you ask me to delete them. Your cookie choice stays in your browser until you clear it.

The site is served over HTTPS. Contact messages sit in my Cloudflare account, which I alone can access. No system is immune to attack, which is one reason I collect as little as I do.

I am based in the United States, and my providers process data in the United States and other countries, which may not protect data the way your own country does.

• Change your analytics answer at any time with Cookie settings at the foot of every page. It shows where consent applies.
• Clear this site's data in your browser. That removes the cookies and your saved choice.
• Ask me to show you, correct, or delete what I hold about you, or to stop using it. Email hello@fletchwork.com and I will reply within a month. If you are in the UK or Europe, you can also raise a concern with your local data protection authority.