Privacy

Privacy Policy

I collect as little as I can: just enough to reply to you, invoice you or keep this site secure. I never sell your data, and I do not use analytics, advertising or tracking pixels.

Last updated: October 2026

What I collect and why

This is everything I hold, why I need it and how long I keep it.

Your name
So I can reply to you properly. I keep it with your message until I no longer need the conversation.
Your email address
So I can answer you. I never add you to a mailing list and never pass it to anyone else.
Your message
So I know what you are asking about. It stays with your name and email address in a private file.
Your IP address
So I can block spam floods and repeated submissions. I store only a salted hash for ten minutes, never the raw address.
Invoice details
So I can keep accurate accounts if you buy something. I record your name, email address, what you bought, the amount and the PayPal transaction ID.

Contact messages

When you send the contact form, your name, email address and message are written to a private file on the server. If I have notifications switched on, a copy is also emailed to me. I use them only to reply to you.

Cookies and local storage

I keep three small preferences in your browser, and Cloudflare may add one security cookie of its own. None of them track you across other sites.

Language (mte-lang)
Remembers whether you chose English or Hebrew. A cookie that expires after one year.
Theme (mte-theme)
Remembers your colour theme. Stored in localStorage and never sent to me.
Captcha session
Proves you answered the maths question on the contact form. Expires when you close the browser or send the form.
Cloudflare security (__cf_bm)
A short-lived cookie Cloudflare may set to tell real visitors from automated traffic. It expires after 30 minutes.

Invoices and payments

Each invoice link uses a long random token instead of your personal details. Card and PayPal payments are handled by PayPal, so I never see or store your card number or bank details. I keep only the transaction ID PayPal gives me.

Who else sees your data

I do not sell or rent personal data. These are the only services that touch it.

Cloudflare
Sits in front of the site as its CDN and security layer. Your requests pass through Cloudflare, so it sees your IP address and browser details, and it may keep security logs.
Hosting provider
Stores the site and its private data directory, and may keep standard server logs.
Email provider
Delivers contact notifications and invoice emails.
PayPal
Handles card and PayPal payments. I never see your card details.
Fonts and libraries
Google Fonts supplies the typeface and unpkg supplies React on technology pages. Both receive your IP address when those files load.
Not here
No analytics, advertising networks, social media pixels or data brokers.

How I keep your data safe

The site runs over HTTPS. Contact messages and invoice files sit in a private directory that cannot be reached from the web, invoice files use random storage names, and the contact form is protected by a honeypot, a maths question and a per-IP rate limit.

Your rights

Under UK GDPR you can ask me to:

  • Show you the personal data I hold about you
  • Correct anything that is wrong
  • Delete your data where I do not need it for tax or legal reasons
  • Stop processing your data, or withdraw consent you have given

To use any of these rights, send me a message through the contact form. If you are unhappy with how I handled your request, you can complain to the Information Commissioner's Office (ICO).

ico.org.uk

Changes to this policy

If I change how I handle personal data, I will update this page and the date at the top.

Contact

If you have a question about this policy, or want to see, correct or delete your data, send me a message and I will reply.

Send me a message