Last updated · May 2026

Privacy Policy

What data this site collects, what it's used for, and how to get your information removed. In plain English, no dark patterns.

1. What gets collected

This site collects two kinds of data:

  • Information you give me on purpose — name, email, company, and the message you type into the contact form. Submitted directly to my private database (Supabase).
  • Anonymous analytics — page views, the path you took through the site, the pages you came from, browser type, and general region. Collected via Google Analytics 4 and Vercel Analytics. None of this is tied to your name or email unless you also submit the contact form.

2. Why I collect it

  • To reply to your message and follow up on next steps.
  • To understand which articles and topics resonate so I can write more of what's actually useful.
  • To detect and block spam and abuse on the contact form (Google reCAPTCHA, IP rate-limiting).
  • To improve site performance and fix bugs.

I do notsell your data, rent it, or share it with third parties for their own marketing. I don't maintain a separate marketing list — if you fill out the contact form, you go straight to me.

3. Cookies and tracking

The site uses cookies and similar technology for:

  • Analytics — Google Analytics 4 sets a cookie to measure unique visitors and track session paths. You can opt out via your browser settings or extensions like uBlock Origin.
  • Spam protection— Google reCAPTCHA loads on the contact page only and may set its own cookies per Google's policy.
  • Admin sessions — only set when I sign in to my own admin dashboard. Not relevant to public visitors.

The site does not use third-party advertising cookies or fingerprinting.

4. Third parties

The site integrates with these services. Each has its own privacy policy:

  • Vercel — hosting and edge delivery
  • Supabase — contact form storage and admin authentication
  • Google reCAPTCHA — spam protection on the contact form
  • Google Analytics 4 — anonymous traffic analytics
  • Resend — sends me an email notification when you submit the contact form
  • Calendly — booking widget on the contact page (loads only after a successful submission)
  • Google Sign-in (Supabase Auth) — only used for my own admin login

When you click an outbound link (especially affiliate links on the resources page), the destination site collects its own data per its policy. I'm not responsible for what happens after you leave.

5. Data retention

  • Contact form submissions are kept indefinitely so I have history of past conversations. Email me to request deletion.
  • Analytics data is retained per the Google Analytics 4 default (14 months).
  • Admin session cookies expire after 7 days of inactivity.

6. Your rights

You can:

  • Request a copy of any data I have about you.
  • Request correction if anything is wrong.
  • Request deletion of your contact form submissions.
  • Opt out of analytics via browser settings or do-not-track extensions.

To exercise any of these, email jordan.glickman @ impremis.com. I aim to respond within a few business days.

7. Security

The site enforces HTTPS site-wide with HSTS preload, security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), and reCAPTCHA + IP rate-limiting on the contact form. The admin dashboard is gated behind Google SSO with an email allowlist. Supabase data lives in a private database with row-level security enabled.

That said, no online service is perfectly secure. If you spot a vulnerability, please email me at the address above so I can fix it quickly.

8. Children

This site isn't directed at anyone under 16 and I don't knowingly collect data from children. If a parent or guardian believes I've received data from a child, email me and I'll remove it.

9. International users

Data is processed and stored on infrastructure in the United States (Vercel) and the region you set up Supabase in. By using the site you consent to this transfer.

10. Changes to this policy

I may update this policy when the site adds or removes services that handle data. The current version always lives at this URL with the updated date at the top.

11. Contact

Questions, requests, or concerns? Email jordan.glickman @ impremis.com.