Privacy Policy

Last updated: 25 July 2026

Overview

This is a personal website. It does not require accounts, contain forms, accept user-generated content, or collect personally identifiable information beyond the minimum that any web server logs by default. This policy explains what data is collected and how it's used.

What's collected

Anonymous usage analytics. This site uses Vercel Web Analytics and Vercel Speed Insights. Both services:

• Collect aggregate, anonymous page-view counts (referrer, country, device class, browser family, URL)
• Do not set cookies
• Do not store personally identifiable information
• Do not fingerprint visitors
• Respect the Do Not Track and Global Privacy Control browser signals

Google Analytics 4. This site also uses Google Analytics 4 to understand aggregate traffic and search performance. Google Analytics:

• Sets first-party cookies (_ga and similar) to distinguish returning visitors
• Collects page views, approximate location (city level), device and browser information, and referrer
• Does not log or store IP addresses (GA4 default)
• Shares the collected data with Google, which processes it under its own terms

Data collected by Google Analytics is used only for aggregate traffic measurement — not for advertising, remarketing, or audience building. See how Google uses this data at policies.google.com/technologies/partner-sites. You can opt out of Google Analytics across all websites with the official browser add-on, or block it with any standard content blocker — the site works identically without it.

Server logs. Standard HTTP logs (IP address, user agent, request URL, timestamp) are retained by Vercel for operational and security purposes. These are not used for advertising, profiling, or analytics beyond the minimum required to operate the service.

Email. When you contact me via the email link on the homepage or social profiles, normal email rules apply. Your address is not added to any list. It is not shared with third parties.

Embedded content

The homepage embeds a Substack subscribe form for The Compositor. If you interact with that form (for example, by subscribing), Substack's privacy policy governs that interaction. See substack.com/privacy.

Some restored archive posts embed YouTube videos using YouTube's privacy-enhanced mode (youtube-nocookie.com), which does not set cookies unless you play the video. If you play an embedded video, Google's privacy policy governs that interaction.

Third parties involved

• Vercel hosts the site and provides analytics. Privacy policy at vercel.com/legal/privacy-policy.
• Substack provides the embedded subscribe widget. Privacy policy at substack.com/privacy.
• Google provides Google Analytics 4 and hosts the embedded YouTube videos on archive posts. Privacy policy at policies.google.com/privacy.
• Cloudflare manages DNS for this domain. Privacy policy at cloudflare.com/privacypolicy.

No other third-party services have access to visitor data. There is no advertising network, no retargeting, and no sale or sharing of personal information.

Your rights

Depending on where you live (EU, UK, California, Colorado, and other jurisdictions), you may have rights under applicable privacy law including the right to access, correct, or delete personal information held about you. Because this site does not maintain user accounts or records about visitors, there is typically nothing to access or delete, but if you have questions, email hi@iamjustinwinter.com.

Global Privacy Control and Do Not Track

Vercel Web Analytics and Speed Insights respect both signals — visitors sending either will not be counted. Google Analytics does not automatically honor these signals; use the opt-out add-on or a content blocker to exclude yourself from it.

Changes

This policy may be updated as the site evolves. The "Last updated" date above reflects the most recent change. Material changes will be reflected in a clearly dated entry below.

Contact

Justin Winter, hi@iamjustinwinter.com