Privacy Policy

This site (aaronwylie.com) is the personal portfolio of Aaron Wylie. I take a deliberately minimal approach to data: I collect only what the site needs to function and to let you get in touch. I do not sell your data, and I do not use it for advertising.

What I collect

• Contact form. When you send a message, I collect the name, email, optional project-budget range and message you provide. Your browser's user-agent string is also stored for basic abuse prevention.
• Analytics. I use Google Analytics 4 to understand aggregate traffic (pages viewed, approximate region, device type). This uses cookies and collects a truncated IP address. It tells me how many people visit and what they read - not who you are.
• Server logs. Like any web server, the infrastructure records requests (IP address, timestamp, path) transiently for security and reliability.

Why I collect it, and the legal basis

• To respond to you. Contact-form data is used solely to reply to your enquiry. Legal basis: your consent, given by submitting the form.
• To improve the site. Analytics data is used in aggregate to improve content and performance. Legal basis: legitimate interest in running the site.
• To keep the site secure. Logs and the user-agent string support abuse prevention. Legal basis: legitimate interest in security.

Who processes your data

A few trusted third parties help run the site:

• DigitalOcean - hosting. The database and application run on a server I operate there.
• Resend - delivers the email notification when you use the contact form.
• Google Analytics - aggregate traffic analytics.

Each processes data under its own privacy terms. I do not share your data with anyone else.

Cookies

The only cookies set are those used by Google Analytics for aggregate measurement. The site sets no advertising or cross-site tracking cookies. You can block cookies in your browser, or use a tracker-blocking extension, and the site will still work normally.

How long it is kept

Contact messages are retained while I follow up with you and for a reasonable period afterwards for my records, then deleted on request. Analytics data is retained per Google Analytics' default retention. Server logs rotate and are short-lived.

Your rights

Depending on where you live (for example under GDPR or PIPEDA), you may have the right to access, correct, or delete the personal data I hold about you, or to withdraw consent. I'm a one-person operation, so the fastest route is simply to email me and I'll take care of it.

Contact

Questions about this policy, or want your data removed? Email aaronwyliework@gmail.com or use the contact form.

Changes

If this policy changes, I'll update this page and the date at the top. Material changes will be reflected here.