Zach Patrick

Privacy policy

Last updated September 5, 2026

This site is run by Zach Patrick. This page explains what information is collected, why, and what I do with it. If you have questions, email [email protected].

What I collect

I only collect what I need to run the site and reply to people who reach out.

  • Contact form. If you send a message, I receive the name, email address, and message you submit. That email is delivered through Postmark.
  • Spam protection. The contact form uses Cloudflare Turnstile to tell humans apart from bots. Cloudflare may process technical data such as your IP address for that check.
  • Client documentation. If you are a client, I store your client name and the password used to unlock your docs. After you sign in, the site sets a small httpOnly cookie so you do not have to enter that password on every page. The cookie is not used for advertising.
  • Appearance settings. Theme, font, and related preferences stay in your browser’s local storage. They are not sent to me.
  • Hosting and fonts. The site is served over the internet, so the host and CDN may keep standard request logs (IP address, browser, pages requested). Fonts are loaded from Google Fonts.

What I do not collect

I do not sell your information. I do not run advertising networks on this site, and I do not use analytics or tracking cookies at the moment.

How long I keep it

Contact messages stay in my email until I no longer need them to reply or keep a record of the conversation. Client documentation and related account details stay in my CMS for as long as we are working together, or until you ask me to remove them. The client access cookie lasts up to 30 days, or until you lock the page.

Who else can see it

I use a few services to operate the site:

  • Postmark, to deliver contact form emails
  • Cloudflare, for Turnstile and, when applicable, hosting or DNS
  • Payload CMS, to store site content and client documentation

Those providers only get what they need to do that job. I do not share contact messages or client documentation with anyone else unless I am legally required to.

Your choices

You can email me to ask what I have about you, to correct it, or to ask me to delete it. You can clear site preferences in your browser, and you can lock a client docs session from the docs page. If you want a contact message removed, say so and I will delete it from my inbox.

Children

This site is not directed at children, and I do not knowingly collect personal information from anyone under 13.

Changes

If this policy changes in a meaningful way, I will update this page and the date at the top.