--- title: "Privacy Policy" date: 2026-06-21 author: "" --- # Privacy Policy **Effective date:** June 21, 2026 This Privacy Policy explains what personal data this website (courtneyr.dev, “the site,” operated by Courtney Robertson, “I,” “me”) collects, why, and what choices you have. It works alongside the [Cookie Policy (EU)](https://courtneyr.dev/cookie-policy-eu/), which lists the specific cookies and similar technologies in use. ## What I collect and why ### Newsletter If you subscribe to my newsletter, I collect your email address (and your name, if you provide it) and store it in this site’s own database using a self-hosted newsletter system. I use it to send the updates you signed up for, and I record opens and link clicks to understand what’s useful. You can unsubscribe at any time using the link in every email. ### Comments When you leave a comment, I collect the name, email address, and any website you enter, along with your IP address and browser user-agent string to help with spam detection. An anonymized hash of your email address may be sent to the Gravatar service to check whether you have a profile image. ### Analytics I use Google Analytics 4 (via the Google Site Kit plugin) to understand aggregate traffic and which content is read. Where required, this runs only after you consent through the cookie banner. Google processes this data on my behalf; IP addresses are truncated/anonymized by Google Analytics 4. See [Google’s Privacy Policy](https://policies.google.com/privacy). ### Cookies and consent Non-essential cookies and similar storage are set only after you opt in through the consent banner, which is managed by Complianz. You can change or withdraw your choice at any time. For the full list, see the [Cookie Policy (EU)](https://courtneyr.dev/cookie-policy-eu/). ### Embedded content Some pages embed content from other sites (for example YouTube or Vimeo videos and Calendly scheduling). These embedded services can collect data about you and set their own cookies when you interact with them, exactly as if you had visited the other site directly. ### Hosting, delivery, and security The site is hosted on GoDaddy Managed WordPress and served through Cloudflare. As part of delivering and protecting the site, these providers process technical data such as your IP address and request information in server and security logs. ### Contacting me If you reach out through the [contact page](https://courtneyr.dev/contact/) or by email, I receive the information you choose to send and use it only to respond to you. ## Legal bases (EU/UK) Where the GDPR or UK GDPR applies, I rely on: your *consent* (newsletter, non-essential cookies and analytics); my *legitimate interests* in running a secure, functional site and understanding aggregate usage; and, for comments and replies, the steps you ask me to take. You can withdraw consent at any time. ## How long I keep data Newsletter data is kept until you unsubscribe or ask me to remove it. Comments are kept indefinitely so follow-up replies make sense, unless you ask me to delete them. Analytics data follows Google Analytics’ retention settings. Server and security logs are retained by my hosting providers per their own schedules. ## Who I share data with I do not sell your personal data. I share data only with the service providers that make the site work — currently Google (analytics), GoDaddy (hosting), and Cloudflare (content delivery and security) — and only as needed for those purposes, or where required by law. ## International transfers Some of these providers are based in the United States, so your data may be processed there. Where required, transfers rely on appropriate safeguards such as the providers’ standard contractual clauses. ## Your rights Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, contact me through the [contact page](https://courtneyr.dev/contact/). If you are in the EU/UK, you also have the right to complain to your data protection authority. ## Global Privacy Control This site honors recognized opt-out signals, including Global Privacy Control (GPC), where the consent platform supports them. ## Children This site is not directed to children under 16, and I do not knowingly collect their personal data. ## Changes to this policy I may update this policy from time to time. The “effective date” above shows when it last changed. ## Contact Questions about this policy or your data? Reach me through the [contact page](https://courtneyr.dev/contact/).