· Legal
Privacy

Short version: this site doesn't track you.

imlogan.dev is a static site. It serves HTML, CSS, JavaScript, and images directly from the host. No cookies, no analytics, no accounts, no fingerprinting.

What I collect

Nothing. The site has no analytics script, no tag manager, no behavioral tracking, no cookie banner, and no login. Every visit is anonymous to me.

The hosting provider (Vercel) keeps standard server logs — IP address, user agent, requested URL, timestamp — for short-term operational and security purposes. I don't read those logs and I don't have a way to associate them with a person.

What I don't collect

  • Names, emails, or any contact info — unless you choose to send an email to imlogan.dev@gmail.com.
  • Behavioral analytics, page-view tracking, scroll depth, click maps.
  • Advertising or remarketing identifiers.
  • Personalization profiles.

Newsletter

The newsletter is double opt-in. When you submit the form, your email is stored in Firebase Firestore (Google Cloud, EU region eur3) and a confirmation email is sent via Resend. Your subscription only becomes active after you click the link in that email — until then, nothing else happens.

What gets stored per subscriber: email address, timestamp of consent, and the IP/user-agent used to subscribe (kept as proof of consent for GDPR). I don't share, sell, or sync this list with any other service.

Every email I send includes a one-click unsubscribe link. You can also request, export, or delete your data here, or email imlogan.dev@gmail.com.

Data retention

Pending subscriptions (email submitted but confirmation link not clicked) are kept for 14 days and then deleted automatically. Confirmed subscriber records are kept for as long as the subscription is active. When you unsubscribe — through the link in any email or via the request page — your record is deleted immediately. After deletion, the only trace is a short-term entry in standard server logs (see above), kept by Vercel for operational purposes only.

International data transfers

Two sub-processors handle data on my behalf: Firebase / Google Cloud (subscriber storage, EU region) and Resend (transactional email delivery, US-based). Both are covered by data processing agreements that include Standard Contractual Clauses (SCCs) for transfers to the United States, in line with GDPR Article 46. By subscribing, your email passes through Resend's US infrastructure to be delivered to your inbox; the long-term storage of your record stays in the EU.

Your rights (GDPR)

Under the GDPR you have the right to access your data, correct it, port it, and request its deletion. The fastest way to do any of these is the data request page — it sends a verification email to your address, then lets you view a JSON copy of everything stored about you and optionally delete it. You can also email me directly and I'll handle it manually within 30 days.

This site links to third-party services (Steam, the App Store, GitHub, X, Itch.io, and others). Those services have their own tracking and privacy policies. Once you click an external link, you're on their turf.

RSS feed

The RSS feed is a plain XML file. Subscribing through a reader hits the host like any other page request — no extra tracking on my end.

Local storage and cookies

The site does not set any cookies. It does not read or write to localStorage, sessionStorage, or IndexedDB.

Changes to this policy

If anything changes — say, when analytics or a newsletter backend gets wired up — this page is updated and the date at the top reflects the change. There's no email blast; the only record is the file's own history.

Contact

Questions, concerns, or a request to be forgotten (even though there's nothing to forget): imlogan.dev@gmail.com.