Short version: I run a small ocarina-tab site, not an ad-tech operation. However, I AM a Sr Security Engineer with almost 30 years of experience and therefore I know a little bit about tech that most website owners gloss over. I’ll try to explain what and why without getting into the weeds too deep.
I collect the minimum I need to keep the site working and to see which songs people want, I do not sell or rent your information, and I never add you to an email list without your explicit confirmation. The longer version is below.
Last updated: 16 July 2026.
What I collect, and why#
Site analytics. When you visit, my analytics record things like your IP address, the search term or link that brought you, the pages you view and the path through them, and when you arrive and leave. I use this in aggregate to understand which songs and pages people want so I know what to build next. My analytics are cookieless (Google Search Console, a self-hosted Umami instance, and Cloudflare’s server-side stats, not Google Analytics), so there is no cookie-consent banner because there are no tracking cookies.
Contact form. If you use the contact page, I collect the name, email, and message you send, plus the IP address of the submission (for spam protection). It is stored in a database I control and emailed to me so I can reply. A Cloudflare Turnstile check runs to block bots; it is privacy-respecting and sets no third-party tracking cookies.
Email updates (newsletter). If you choose to sign up for email updates, I collect your email address and, as a record of your consent, the IP address and time of your signup and confirmation. Signup is double opt-in: you are not added until you click a confirmation link, so nobody can sign you up without access to your inbox. Every email includes a one-click unsubscribe link. Newsletter emails also include standard open and click tracking (a tiny image and measured links, handled by Amazon SES): it tells me whether emails are being opened so I can stop mailing addresses that have gone quiet. It applies only inside the emails themselves, never on the website, and unsubscribing ends it entirely.
Who processes it#
To run the site I rely on a few service providers who handle this data on my behalf:
- Cloudflare - the form and database service (Workers and D1) that stores contact and subscriber records, plus DNS, content delivery, and the Turnstile bot check.
- Amazon SES (AWS) - delivers the contact notifications and the newsletter email.
- Netlify - hosts the website itself.
I do not sell, rent, or trade your information to anyone.
Your choices#
- Unsubscribe anytime using the one-click link in any email; you are removed right away.
- Ask me to delete your information - your contact message or your subscriber record - by writing to me through the contact page. I will remove it.
- I keep only what I need and destroy data I have no immediate use for.
Cookies#
No advertising or tracking cookies. Your browser may store a small preference locally on your device (for example, light or dark appearance); it stays on your device and is not used to track you across the web.
Contact and mailing address#
Questions about privacy, or a request to see or delete your data: use the contact page. My mailing address is 2042 Quail Run Rd, Wylie, TX 75098.
Changes#
I may update this policy from time to time; the “Last updated” date above shows when it last changed.