Privacy Policy
Last Updated: 2026-06-18
Cookie Usage
We use the following cookies:
1. Essential Cookies:
- kb-consent: Stores your privacy preferences
- Duration: 1 year
- Purpose: Remember your consent choices
2. Analytics Cookies (Only if consented):
- _ga, _ga_*: Google Analytics cookies
- Duration: 2 years
- Purpose: Anonymous usage statistics
- Data collected: Page views, session duration, referrer
- Data is anonymized and IP addresses are masked
3. Functional Cookies (Only if consented):
- Purpose: Remember your preferences
- Duration: Session
- No personal data stored
4. Marketing Cookies (Only if consented):
- Currently not in use
- Included in preferences for future use
Contact Submissions
When you submit the contact form, we collect:
Fields Collected:
- Name (optional)
- Email address (required)
- Message content
Storage and Processing:
- Submissions are stored in a PostgreSQL database hosted by Neon
- Data is processed by Resend for email delivery
- Rate limiting data (IP-based) is temporarily stored in Redis
Retention:
- Contact submissions are retained for 2 years for business continuity
- Rate limiting data is automatically deleted after 24 hours
Purpose:
- To respond to your inquiry
- To prevent spam and abuse via rate limiting
- No marketing use without explicit consent
Newsletter Signups
When you subscribe to updates, we collect:
Fields Collected:
- Email address (required)
- Signup page or form location
- IP address and user agent for abuse prevention
Storage and Processing:
- Newsletter signups are stored in a PostgreSQL database hosted by Neon
- A notification email is sent through Resend to kevin@kevinbytes.com
- Rate limiting data is temporarily stored in Redis
Retention:
- Newsletter signup records are retained until you unsubscribe or request deletion
- Rate limiting data is automatically deleted after 24 hours
Purpose:
- To send research notes and site updates
- To prevent spam and abuse via rate limiting
- To maintain an accurate subscriber list
Data Storage
We store minimal data:
- Consent preferences in browser storage
- Contact and newsletter submission data in PostgreSQL when you submit those forms
- Rate limiting data for contact and newsletter forms (temporary, IP-based)
- No personal data is stored without explicit consent
- All data processing complies with GDPR and CCPA requirements
Your Rights
You have the right to:
- Access your data
- Delete your data
- Withdraw consent
- Change preferences
- Export your data
Contact kevin@kevinbytes.com for data requests.
Third-Party Services
We use:
- Google Analytics (with IP anonymization and consent required)
- Neon (PostgreSQL hosting for form submissions and security logs)
- Vercel (for hosting and edge functions)
- Resend (for email delivery)
- Upstash (for rate limiting via Redis)
All services comply with GDPR and CCPA requirements.
Updates
This policy is reviewed quarterly. Users will be notified of material changes via banner notification.