Privacy Policy for Snowgraphs

TL;DR: Your Privacy at a Glance

We keep this simple and honest:

• We collect minimal data needed to run the site and respond to inquiries
• We never sell your personal information
• We use Vercel Analytics for aggregated traffic insights (not Google Analytics)
• There is no cookie consent banner, we do not run a CMP
• You can contact us to exercise GDPR/CCPA rights

1. Data Collection and Transparency

We collect limited information:

• Aggregated website analytics via Vercel Analytics (page views and performance metrics; designed to be privacy-friendly)
• Optional contact form submissions (name, email, subject, message)
• Technical request metadata processed by our host (e.g., IP address for security, rate limiting, and delivery)

Specific Examples:

• When you browse the site, Vercel Analytics records anonymized/aggregated usage signals to help us understand traffic and Core Web Vitals
• Contact form submissions are emailed to us via Resend so we can reply; they are not sold or used for advertising

We do not sell or monetize your personal data to third parties. We do not use Google Analytics on this site.

2. Legal Basis for Data Processing

Where applicable privacy laws apply, we process data under:

• Consent / contractual necessity when you submit the contact form
• Legitimate interests in operating, securing, and improving the website
• Compliance with legal obligations when required

Example: If you submit a contact form, we use your email to respond to your inquiry.

3. Third-Party Services We Use

We use a small set of processors to run the site:

• Vercel (hosting, deployment, and Vercel Analytics)
• Resend (transactional email delivery for contact form messages)

We do not integrate LinkedIn APIs, Cloudflare as a CDN/WAF layer for this site, or Google Analytics. Public LinkedIn profile links on the site are ordinary outbound links only.

Each processor operates under its own privacy policy and data processing terms.

4. Data Protection and Security

We take reasonable technical and organizational measures, including:

• HTTPS encryption in transit
• Security headers (e.g., HSTS, frame denial, content-type sniffing protection)
• Input escaping for contact form email content
• Basic rate limiting on the contact API to reduce abuse

5. International Data Transfers

Our hosting and email providers may process data in the United States or other regions. Where required, transfers rely on the provider's contractual safeguards (such as Standard Contractual Clauses).

6. Cookies and Tracking

This site does not use a cookie consent management platform (CMP). We do not claim to collect marketing or advertising cookie consent because we do not run that stack.

• Essential cookies or local storage may be set by the platform for basic site function (e.g., theme preference)
• Vercel Analytics is used for aggregated performance and traffic insights; see Vercel's documentation for how their analytics product handles data
• We do not use Google Analytics, advertising pixels, or a third-party CMP on this site

If you want analytics disabled for your visits, you can use browser privacy controls or an ad/tracker blocker. For data requests related to contact form submissions, email us using the contact details below.

7. Children's Privacy

This site is intended for a professional audience. We:

• Do not knowingly collect personal data from children under 13
• Will delete any such data if we become aware it was collected accidentally

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal data you provided (for example, via the contact form). Contact us to make a request. You may also contact your local data protection authority.

9. Contact

For privacy concerns or data requests:

10. Policy Updates

We may update this policy when our practices or legal requirements change. Last updated: July 10, 2026.