johnpcavanaugh.com/privacy.html at main · JetHayes/johnpcavanaugh.com · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
<!DOCTYPE html>
<html lang="en" data-theme="dark">
<head>
  <meta charset="UTF-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
  <title>Privacy Policy — John Cavanaugh</title>
  <meta name="description" content="Privacy policy for johnpcavanaugh.com. Cookieless, Privacy by Design analytics only." />
  <link rel="canonical" href="https://johnpcavanaugh.com/privacy.html" />

  <meta http-equiv="X-Content-Type-Options" content="nosniff" />
  <meta http-equiv="Referrer-Policy" content="strict-origin-when-cross-origin" />
  <meta http-equiv="Content-Security-Policy" content="default-src 'self'; img-src 'self' https://johnpcavanaugh.com; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://cloud.umami.is; connect-src 'self' https://cloud.umami.is https://gateway.umami.is;" />

  <link rel="icon" type="image/svg+xml" href="favicon.svg" />
  <link rel="alternate icon" href="favicon.ico" />
  <link rel="stylesheet" href="css/base.css" />
  <script defer src="https://cloud.umami.is/script.js" data-website-id="149889af-f9c3-4bf7-92f7-9495e162f4c6"></script>
</head>
<body>

<nav class="site-nav" role="navigation" aria-label="Main navigation">
  <div class="nav-inner">
    <a class="nav-logo" href="index.html">John <span>P.</span> Cavanaugh</a>
    <ul class="nav-links">
      <li><a href="speaking.html">Speaking</a></li>
      <li><a href="index.html#featured">Featured</a></li>
      <li><a href="index.html#advisory">Advisory</a></li>
      <li><a href="index.html#press">Press</a></li>
      <li><a href="index.html#experience">Experience</a></li>
      <li><a href="index.html#connect">Connect</a></li>
      <li>
        <button class="theme-toggle" onclick="toggleTheme()" aria-label="Toggle light/dark mode">
          <span id="theme-label">☀ light</span>
        </button>
      </li>
    </ul>
    <div class="nav-right">
      <button class="nav-hamburger" onclick="toggleDrawer()" aria-label="Open menu" aria-expanded="false" id="hamburger">☰</button>
    </div>
  </div>
</nav>

<div class="nav-drawer" id="nav-drawer" role="menu">
  <a href="speaking.html">Speaking</a>
  <a href="index.html#featured">Featured</a>
  <a href="index.html#advisory">Advisory</a>
  <a href="index.html#press">Press</a>
  <a href="index.html#experience">Experience</a>
  <a href="index.html#connect">Connect</a>
</div>

<canvas id="grain-overlay"></canvas>

<div class="wrap">

  <header>
    <p class="eyebrow">Privacy Policy</p>
    <h1 class="page-h1">Written by a human.</h1>
  </header>

  <section class="prose">
    <p class="policy-meta">johnpcavanaugh.com · Last updated July 18, 2026</p>

    <h2>TL;DR:</h2>
    <p>This site doesn't use cookies. It doesn't track you across the web. It doesn't sell, share, or monetize anything about you. I turned down a lot of money once specifically to avoid doing that, and I'm not starting here.</p>
    <p>Here's the complete picture of what this site touches and why:</p>

    <h2>What this site collects</h2>
    <p><strong>Anonymous visit statistics.</strong> I use <a href="https://umami.is" target="_blank" rel="noopener">Umami</a>, a privacy-focused analytics tool, to understand things like how many people visit, which pages they read, and what country they're visiting from. Umami is cookieless: it stores nothing on your device, doesn't fingerprint you, and doesn't follow you to other websites. The statistics I see are aggregate only. For example, I can see that a page got 40 visits but I can't see <em>who</em> visited it. Your IP address is used transiently to derive coarse, non-identifying information (like country) and is not stored.</p>
    <p><strong>Information you choose to send me.</strong> If you fill out the contact form, I receive what you type — typically your name, email address, message, and qualifying questions. That's it, and only because you chose to send it. Forms on this site are provided by <a href="https://tally.so" target="_blank" rel="noopener">Tally</a>, which processes your submission and delivers it to me. Tally's own privacy policy governs their processing as a service provider and was chosen by me based on its privacy-centric methodlogies.</p>

    <h2>What this site does not do</h2>
    <ul>
      <li>No cookies, of any kind — which is why there's no cookie banner</li>
      <li>No advertising or ad networks</li>
      <li>No cross-site tracking, retargeting pixels, or social media trackers</li>
      <li>No selling, renting, or sharing of your information with anyone</li>
      <li>No profiling or automated decision-making</li>
    </ul>

    <h2>How I use what you send me</h2>
    <p>If you contact me, I use your information for exactly one purpose: responding to you. If you inquire about speaking or consulting, I'll use it to follow up on that conversation. You will not be added to any list without explicitly opting in.</p>

    <h2>Retention</h2>
    <p>Contact form submissions are kept as long as needed to handle our correspondence, then deleted. Aggregate analytics contain no personal information and are retained indefinitely as simple counts.</p>

    <h2>Your rights</h2>
    <p>Depending on where you live, you may have legal rights to access, correct, or delete personal information under laws like the GDPR or U.S. state privacy laws. In practice, the only personal information I could hold about you is what you sent through the contact form. If you'd like it deleted, corrected, or a copy of it, just ask.</p>

    <h2>Third-party services</h2>
    <ul>
      <li><strong>Umami</strong> — cookieless, aggregate analytics</li>
      <li><strong>Tally</strong> — contact form processing</li>
      <li><strong>GitHub Pages</strong> — serves this site over HTTPS; GitHub may log requests (including IP addresses) for security and operational purposes, per GitHub's privacy statement</li>
    </ul>
    <p>Each processes only what's necessary to provide its service.</p>

    <h2>Contact</h2>
    <p>Questions, requests, or anything else about your privacy on this site:<br />
    <strong>John Cavanaugh</strong> · write2johncavs@protonmail.com</p>

    <h2>Changes</h2>
    <p>If this policy changes, I'll update the date at the top and highlight the changes in a notes section. Since the my approach is "collect as close to nothing as possible," don't expect much drama here.</p>
  </section>

  <footer>
    <p>© <span id="yr"></span> John Cavanaugh · johnpcavanaugh.com · <a href="privacy.html">Privacy</a></p>
  </footer>

</div>

<script src="js/site.js"></script>

</body>
</html>