About this site
Privacy Policy
What this site collects, and what it doesn’t.
Analytics
I use Pirsch to understand how people use this website (www.james.media), including which pages are visited and which links are clicked.
Pirsch is an analytics tool which is cookie-free and stores nothing on your device. It collects information about visits without using cookies or storing IP addresses. This includes information about the pages people visit, how they arrived at the site, links they click, and general technical information such as browser, operating system, device type, screen size and approximate location. You can find a complete list of the data Pirsch collects in its privacy documentation.
To tell visits apart without identifying anyone, Pirsch makes a one-way hash from your IP address and browser details using a key that changes every day, so you can’t be recognised from one day to the next. Your IP address isn’t stored.
Pirsch can only recognise visitors for up to 24 hours. Historical website statistics are retained in my Pirsch dashboard and reviewed at least every 24 months. Data that's no longer useful is deleted.
The data is hosted in Germany and isn’t used for advertising purposes.
If you'd rather not be included in analytics, there are two ways to opt out:
- Do Not Track: Pirsch respects the Do Not Track setting supported by some browsers. Enabling it prevents Pirsch from recording your visits where the browser sends the relevant signal. Here are the guides for: Google Chrome, Mozilla Firefox and Microsoft Edge. Other browsers will have different steps to enable this feature and browser support varies.
- Ad blocker: Alternatively, you can block requests to api.pirsch.io using an ad blocker or other content-blocking tool.
What I collect, why, and how long I keep it
| Purpose | Data | Lawful basis | Retention | |
|---|---|---|---|---|
| Analytics | IP address and browser details (hashed, not stored) → aggregated statistics | Legitimate interests | Reviewed at least every 24 months; statistics no longer needed are deleted | |
| Security, reliability and spam prevention | IP address, browser details, page requested, time | Legitimate interests | Cloudflare about 31 days, Upsun between 6 months and 2 years | |
| Replying to messages and speaking enquiries | Name, email address, message content | Legitimate interests | Up to 2 years after last contact |
How and why data is used
I use analytics to understand how people use the website, server logs to maintain its security and reliability, and contact details to respond to messages.
Where personal data is processed for these purposes, I rely on legitimate interests as my lawful basis. I aim to collect and retain only what's necessary to operate and improve the site, while respecting visitors' privacy.
I keep personal information only for as long as needed for the purposes described in this policy, following the retention periods outlined above.
Hosting and Security
The site is hosted by Upsun. Like any web server, it retains standard access logs, including IP addresses, for security and to keep the site running. I don’t use these logs to track visitors.
I also use Cloudflare to help deliver the site securely and efficiently. Cloudflare may process technical information about requests to the site, including IP addresses, browser details and security-related information, to protect against malicious traffic, prevent automated abuse (including on the contact form) and improve performance.
Cloudflare may process information outside the UK, including in the United States. Transfers are protected by Cloudflare’s certification under the UK-US Data Bridge, backed up by standard contractual clauses and the ICO’s UK Addendum. You can read more in Cloudflare's Privacy Policy.
Technical logs and security information are retained according to the policies of the hosting and security providers. Upsun retains application logs while the hosting environment exists, subject to log file size limits, and internal system logs for between 6 months and 2 years. Cloudflare retains certain website traffic and security analytics for approximately 31 days on standard plans, although retention varies by service and data type. I don't separately collect or archive these logs.
This website is hosted in one of Upsun's 'greener regions', which is designed as having an energy grid carbon intensity below 100 g CO2eq/kWh. This carbon intensity data is sourced by Upsun from the annual averages provided by the IEA and ElectricityMaps.
Cookies
This site doesn't use cookies for advertising or visitor analytics. Analytics are handled by Pirsch, which doesn't store cookies on your device.
Cloudflare may set cookies that are necessary to protect the site from malicious traffic and maintain its security. Depending on the security features enabled, these may include __cf_bm, which helps identify automated traffic, and cf_clearance, which records that a visitor has passed a security check.
These cookies aren't used by me for advertising or visitor analytics. Where cookies are strictly necessary to provide a service you've requested, they may be used without consent under UK cookie rules.
You can find more information about these cookies in Cloudflare's cookie documentation.
Third parties
There are no embedded videos from other platforms, no social media widgets and no advertising. The site loads two third-party scripts: Pirsch (analytics) on all pages, and Cloudflare Turnstile (spam protection) on the contact form. Fonts are served from this site, not an external provider. Links to other websites are subject to those sites’ own privacy policies.
Contacting me
If you contact me via the contact form, your name, email address and message are sent to my personal email inbox, and I use them only to reply. If you contact me through LinkedIn, I’ll see your message there instead. I won’t use your details for marketing or sell them to third parties.
You can find out more about how LinkedIn processes data in its Privacy Policy.
The contact form is protected by Cloudflare Turnstile, which checks that a submission comes from a real person rather than an automated bot. Turnstile runs in your browser, and Cloudflare may process technical information such as your IP address and browser details for this purpose (see Hosting and Security for how transfers outside the UK are handled).
Your rights
Under UK data protection law, you have rights over your personal information, including the right to access it, correct it, request its deletion, restrict its use or object to certain processing. These rights depend on the circumstances.
This is my personal website. I’m the data controller: James Hall. I’m responsible for the personal data processed through this website. If you have any questions or would like to exercise your rights, please get in touch using the contact form.
If you're unhappy with how your information has been handled, you can also complain to the Information Commissioner's Office.
Last updated: 19 October 2026