Privacy Policy
Last updated April 2026
The short version
I collect the minimum I need to run this site. I don't sell your data. I don't share it with advertisers. Here's exactly what happens.
What I collect and why
Your email address
If you subscribe to the newsletter, your email goes to Beehiiv - the platform I use to send it. That's it. I use it to send you the newsletter. You can unsubscribe any time from any email.
Account details
If you create an account (for tools or membership), I store your email address and the details needed to run your account - authentication, subscription status. This is handled by Supabase, a secure database platform. Passwords are hashed and never stored in plain text.
Payment information
If you buy a membership, payment is handled entirely by Stripe. I never see or store your card details - Stripe handles all of that. I only receive confirmation that a payment went through.
Usage data
Basic analytics - which pages are visited, where traffic comes from. This is anonymous and aggregate. I use it to understand what's useful and what isn't.
Cookies
This site uses a small number of functional cookies - the kind that keep you logged in if you have an account, or remember your preferences. I don't use advertising cookies or third-party tracking pixels.
If you don't have an account and you're just reading, very little is being stored on your browser.
Third-party services
These are the external services this site uses and what they handle:
- Beehiiv - newsletter delivery and subscriber management
- Supabase - account data and authentication
- Stripe - payment processing
- Vercel - hosting and infrastructure
- Cloudflare - DNS and domain management
Each of these services has their own privacy policy. I've chosen them because they have reasonable data practices and I trust them with the kind of information described above.
Your rights
You can ask me to delete your data at any time. If you have an account, you can close it. If you're on the newsletter, you can unsubscribe. If you want everything gone, just ask.
I'm based in New Zealand, so New Zealand privacy law (Privacy Act 2020) applies here. If you're in the EU, your GDPR rights also apply - you have the right to access, correct, or delete your personal data.
Questions
If something here is unclear or you want to act on your data, get in touch. I'll respond as quickly as I can.