--- title: "Privacy Policy" description: "What davidvkimball.com collects, which services handle it, and what you can do about it, in plain language." updated: 2026-11-04T00:00:00.000Z url: "https://davidvkimball.com/privacy-policy" --- # Privacy Policy Short version: this site sets no tracking cookies, and the only personal details I get are the ones you type in yourself. The rest of this page is the long version. "I" and "me" here means David V. Kimball and David V. Kimball LLC, based in Washington, United States. Questions go through my [contact page](https://davidvkimball.com/contact). ## Analytics I run two analytics tools to see what people read and what's broken. Neither one sets cookies. ### GoatCounter [GoatCounter](https://www.goatcounter.com) counts visits in aggregate: the page, where the visit came from, browser, operating system, screen width, language, and country. It doesn't store IP addresses, and it stores nothing in your browser. It uses your IP address to work out your country, and holds a random ID in memory for up to 8 hours so it can tell a new visit from a repeat view. Its [privacy notes](https://www.goatcounter.com/help/privacy) have the details. I also count a few events there: clicks on buy, demo, store, merch, Zeku, subscribe, speaking, and lilAgents links, actions in the command palette, finished newsletter signups, and finished checkouts. Each event is a name and the page it happened on. Nothing about you or your order goes with it. ### Microsoft Clarity [Microsoft Clarity](https://clarity.microsoft.com) shows me how pages get used, with clicks, scrolling, and session recordings. It runs here with cookies denied, so each page view gets its own ID and your visits aren't tied together. It keeps a small token in your browser's session storage, which clears when you close the tab. Recordings can include the text on the page. Clarity masks what you type into form fields. That data goes to Microsoft under its [privacy statement](https://privacy.microsoft.com/en-US/privacystatement). ## What you give me ### The newsletter If you sign up on [the subscribe page](https://davidvkimball.com/subscribe) or [the Vault CMS page](https://davidvkimball.com/vaultcms), your first name, last name, and email address go to Mailchimp, which runs the lists and sends the email. You confirm by email before you're on a list. Mailchimp also tells me who opened an email and which links got clicked, and every email has an unsubscribe link. Its [privacy policy](https://mailchimp.com/legal/privacy/) applies. ### The contact and speaking forms What you send through [the contact form](https://davidvkimball.com/contact) or [the speaking form](https://davidvkimball.com/speaking) goes to Netlify, which stores it so I can read it and reply. Its [privacy policy](https://www.netlify.com/privacy/) applies. ### Purchases Lemon Squeezy sells the themes, Zeku, and the bundle as the merchant of record. It collects what it needs to take payment and issue a license, such as your name, email address, and billing country, under its [privacy policy](https://www.lemonsqueezy.com/privacy). I receive your name, email address, country, and order details so I can deliver and support what you bought. Buy links on this site also tell Lemon Squeezy which page the sale started on. Downloading a theme or running `pnpm run update` sends your license key to my release server at releases.davidvkimball.com, which runs on Cloudflare, so it can check the key. Zeku is an app with its own [privacy policy](https://zeku.dev/privacy). ### Merch The [merch store](https://merch.davidvkimball.com) is run by Fourthwall, which takes your order, payment, and shipping address under its [privacy policy](https://merch.davidvkimball.com/privacy-policy). ### How I use it I use what you give me to send you what you asked for and to answer you, and I keep it only as long as that takes. No way of sending or storing data over the internet is 100% secure, so please don't send anything sensitive through a form. ## Hosting Netlify hosts this site. Like any web host, it processes standard request data such as IP addresses to serve pages and protect against abuse. ## Embeds and other sites Some pages load things from other services, and those services see your IP address when they do. They may also set their own cookies. - YouTube thumbnails load with the page, and the video itself loads only after you press play. - Posts can embed tweets from X, plus players or widgets from Spotify, SoundCloud, Vimeo, Bandcamp, CodePen, Figma, and Steam. - Pages with math load their styles from jsDelivr, and some pages show avatars from GitHub. Links to other sites are just that, and their own privacy policies apply once you're there. ## What's stored in your browser - Your light or dark theme choice, in local storage. - Clarity's token, in session storage. ## Your choices The site works fine with an ad blocker or content blocker turned on, so feel free to block any of this. To see, correct, or delete what I hold about you, use my [contact page](https://davidvkimball.com/contact). I answer within 30 days. If you're in the EU or UK, you can also complain to your data protection authority. ## Changes If this policy changes, the new version goes on this page with a new date. ## Linked mentions - [About](https://davidvkimball.com/about) - [Contact](https://davidvkimball.com/contact) - [Speaking](https://davidvkimball.com/speaking) - [Subscribe](https://davidvkimball.com/subscribe)