What this site collects, and what it doesn't.

This is a personal portfolio operated by Jimmy Hickman in Petaluma, California. It is not a business service, it has no accounts, and it sells nothing. The short version: the only personal information it ever receives is what you type into the contact form, and that goes to one inbox.

What I collect

Only what you send me. The contact form asks for your name, your email address and your message. Nothing else on this site asks you for anything, and there is no sign-up, no account and no newsletter.

I do not run analytics. There is no Google Analytics, no pixel, no session recorder and no advertising or tracking cookie on this site. Nothing follows you here from anywhere else, and nothing follows you away.

Your browser stores nothing for this site beyond ordinary caching of the page's own files.

Who processes it, and why

Three services are involved in a page view or a message, and each one necessarily sees the technical details of your request — typically your IP address, your browser's user agent and the page you asked for:

• Vercel hosts the site and serves every page. Vercel keeps short-lived operational logs of requests.
• Cloudflare provides the anti-spam check on the contact form (Turnstile) and the DNS for this domain. Turnstile is a privacy-preserving alternative to a CAPTCHA — it does not profile you across sites and does not require you to label photographs.
• Resend delivers the contact form's message to my inbox. It sees the name, email address and message you submitted, because it is the thing carrying them.

This site also loads fonts from Google Fonts and jsDelivr and a small number of brand icons that are served from this domain. A font request tells those services your IP address and browser, and nothing else about you.

What happens to a message

It arrives as an email in a mailbox I control, and it stays there until I delete it. I read everything and I answer most of it. I do not add you to any list, I do not sell or share contact details, and I do not use what you send me for anything other than replying to you.

How long it is kept

Messages are kept as long as they are useful for the conversation they belong to, and are deleted when they are not. Hosting and delivery logs are kept only as long as the providers above retain them for their own operational purposes, which is typically a matter of days to a few weeks.

Your rights in California

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the right to know what personal information has been collected about you, to have it deleted, to have inaccurate information corrected, and to not be discriminated against for exercising any of those rights.

I have never sold or shared personal information, and I do not use it for targeted advertising. There is nothing here to opt out of, because none of it happens.

To exercise any of these rights, email me and say so. Because the only information I hold is what you sent me, honouring a deletion request usually means deleting your message and my reply, and I will confirm when it is done. I will not ask you to create an account to make a request.

Similar rights exist under the GDPR for visitors in the UK and EU. The legal basis for handling a contact-form message is my legitimate interest in replying to someone who asked me a question.

Children

This site is not directed at children and I do not knowingly collect information from anyone under 16.

Changes

If this page changes in a way that matters, the date at the top changes with it.

Contact

Questions, or a request under any of the above: info@hickman.biz. You can also reach me through the contact form.