Privacy Policy

Last Updated: 2026-06-18

Cookie Usage

We use the following cookies: 1. Essential Cookies: - kb-consent: Stores your privacy preferences - Duration: 1 year - Purpose: Remember your consent choices 2. Analytics Cookies (Only if consented): - _ga, _ga_*: Google Analytics cookies - Duration: 2 years - Purpose: Anonymous usage statistics - Data collected: Page views, session duration, referrer - Data is anonymized and IP addresses are masked 3. Functional Cookies (Only if consented): - Purpose: Remember your preferences - Duration: Session - No personal data stored 4. Marketing Cookies (Only if consented): - Currently not in use - Included in preferences for future use

Contact Submissions

When you submit the contact form, we collect: Fields Collected: - Name (optional) - Email address (required) - Message content Storage and Processing: - Submissions are stored in a PostgreSQL database hosted by Neon - Data is processed by Resend for email delivery - Rate limiting data (IP-based) is temporarily stored in Redis Retention: - Contact submissions are retained for 2 years for business continuity - Rate limiting data is automatically deleted after 24 hours Purpose: - To respond to your inquiry - To prevent spam and abuse via rate limiting - No marketing use without explicit consent

Newsletter Signups

When you subscribe to updates, we collect: Fields Collected: - Email address (required) - Signup page or form location - IP address and user agent for abuse prevention Storage and Processing: - Newsletter signups are stored in a PostgreSQL database hosted by Neon - A notification email is sent through Resend to kevin@kevinbytes.com - Rate limiting data is temporarily stored in Redis Retention: - Newsletter signup records are retained until you unsubscribe or request deletion - Rate limiting data is automatically deleted after 24 hours Purpose: - To send research notes and site updates - To prevent spam and abuse via rate limiting - To maintain an accurate subscriber list

Data Storage

We store minimal data: - Consent preferences in browser storage - Contact and newsletter submission data in PostgreSQL when you submit those forms - Rate limiting data for contact and newsletter forms (temporary, IP-based) - No personal data is stored without explicit consent - All data processing complies with GDPR and CCPA requirements

Your Rights

You have the right to: - Access your data - Delete your data - Withdraw consent - Change preferences - Export your data Contact kevin@kevinbytes.com for data requests.

Third-Party Services

We use: - Google Analytics (with IP anonymization and consent required) - Neon (PostgreSQL hosting for form submissions and security logs) - Vercel (for hosting and edge functions) - Resend (for email delivery) - Upstash (for rate limiting via Redis) All services comply with GDPR and CCPA requirements.

Updates

This policy is reviewed quarterly. Users will be notified of material changes via banner notification.