Privacy
Privacy policy
I keep this short and real. This page explains what the site does with your data today, who helps me run it, and how to get your information removed. If anything here is unclear, email me and I'll explain it in plain terms.
Last updated July 2026.
What the site collects
Two ways in. When you use the contact form or email me directly, I collect what you send: your name, email, and note, plus anything optional you add like your company, role, what you need, org stage, budget, and timeline. As you browse, Vercel Web Analytics records aggregate, cookieless page views so I can see which pages help people, and it never builds a profile of you. Like any website, the hosting also logs basic request data, including your IP address, for a short time so the site stays secure and running.
Who helps me run it
A few vendors, all in the United States. Vercel hosts the site, serves the pages, keeps those short-lived request logs, and runs the cookieless analytics. Notion stores what you send through the contact form so I can track and reply to it. Resend delivers that same note to my inbox as an email. A direct email reaches my inbox too. I do not sell your data, and I share it only with these vendors and only for these purposes.
Why I am allowed to process it
Two simple bases. When you contact me through the form or by email, I use what you send to reply and to weigh working together, which is a legitimate interest for both of us. The security logging and the aggregate analytics also rest on my legitimate interest in keeping the site safe and useful. If you would rather not be counted in analytics, browser tracking protection or a content blocker stops it.
Where your data goes and how long I keep it
The site runs in the United States, so if you write from outside the US your information is processed here. The US vendors I use offer standard transfer protections, either Standard Contractual Clauses or the EU-US Data Privacy Framework. I keep what you send, in Notion and in my inbox, while we are in touch and for a reasonable period after, then I delete it. Request logs are short-lived, and analytics data stays aggregate and is never tied to you.
Your rights
You can ask me what I hold about you, ask me to correct it, or ask me to delete it, and I will. If the GDPR or a US state privacy law covers you, those rights apply here, and you also have the right to complain to your local data protection authority. Email rock@rockcyber.com and I take care of it.