Privacy policy
Last updated 25 September 2026
This site is run by one person. It collects the least it can, and this page says exactly what that is. If anything here is unclear, email me and I will answer.
Who is responsible
What is collected, and why
There is one place on this site where you can give me personal information: the quote form. Everything in it is something you type on purpose.
| What | Required | Why | Kept for |
|---|---|---|---|
| Name | Yes | So I know who I am replying to | Up to 24 months |
| Email address | Yes | So I can reply | Up to 24 months |
| Project description | Yes | So I can answer the actual question | Up to 24 months |
| Company | No | Context for the reply | Up to 24 months |
| Budget range | No | Context for the reply | Up to 24 months |
| Timeline | No | Context for the reply | Up to 24 months |
The legal basis is your consent, given by submitting the form, and the steps taken at your request before a possible contract. There is no account system, no newsletter, no profile built about you, and nothing is sold or rented to anyone.
The form also carries one hidden field that a human never sees. If it is filled in, the submission is treated as a bot and discarded. That is the only automated decision on this site, and it decides nothing about you beyond whether the message is delivered.
Analytics, cookies and storage
This site uses Cloudflare Web Analytics. It sets no cookies, does not fingerprint your device, and does not follow you to other sites. It reports page counts, referrers and country in aggregate. I cannot identify you from it.
That is why there is no cookie banner: the site sets no analytics, advertising, or tracking cookies to consent to. The one thing it does keep in your browser is a single entry called theme, remembering whether you chose light or dark. It never leaves your device, and clearing your browser data removes it.
The training pages show video thumbnails served from YouTube's image CDN. Loading an image from another company's server means that company sees the request, so Google receives your IP address and browser user-agent when one of those pages renders. Those requests set no cookies. Nothing else on the site is embedded from a third party: there are no YouTube players, no social widgets, no remote fonts.
Google account data, and the YouTube tools
Separate from this website, I run a small set of command-line scripts that manage my own YouTube channel: they update titles, descriptions, categories and thumbnails on videos I published. Google asks any app that requests access to an account to publish a privacy policy, and this is that policy.
| Question | Answer |
|---|---|
| Whose account does it access | Mine, and only mine. It signs in to the Google account that owns the JonathanSolvesProblems channel. There is no sign-in for anyone else, because there is no user account system. |
| What permission it asks for | One scope, youtube.force-ssl, which allows managing that channel. |
| Where it runs | On my own computer, as a script I start by hand. There is no server, no hosted component and no database. |
| Where the access token is kept | In a file on that computer, excluded from version control and never published. |
| What happens to the data | Video metadata is read from my channel and written back to my channel. It is not copied anywhere else, shared, sold, used for advertising, or used to train any model. |
If you are not me, this app holds nothing about you. It cannot: there is no way for another person to authorise it.
These tools use YouTube API Services, so YouTube's Terms of Service and the Google Privacy Policy also apply to that part. Their use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Access can be revoked at any time from Google account permissions.
Who else touches the data
| Service | What it handles | Where |
|---|---|---|
| Web3Forms | Relays a quote form submission to my inbox | United States |
| Cloudflare | Cookieless page analytics | Global network |
| Hostinger | Static hosting, CDN and standard server logs | EU-headquartered provider |
| Google / YouTube | Serves video thumbnails on the training pages | Global network |
A submission travels through Web3Forms, which is based in the United States, and arrives in my email. Server logs kept by the host include IP addresses for a short period as a normal part of running a website, and are used only for security and diagnostics.
Sending your information to me means it crosses a border, because I use these providers rather than running my own mail server. If you would rather it did not, email me directly instead of using the form and it stays between your mail provider and mine.
How long things are kept
Quote enquiries are kept for up to 24 months from our last exchange, so that I can pick up a conversation where it left off, then deleted. If we end up working together, the records tied to that engagement are kept for as long as the law requires for business and tax records, and no longer.
You can ask me to delete yours sooner at any time.
Your rights
Whatever country you are in, you can ask me to show you what I hold about you, correct it, delete it, send you a copy, or stop using it. Email jonathan@jonathanandrei.com and I will action it within 30 days. It is free, and I will not ask you for anything beyond enough information to be sure I am answering the right person.
If you are in Quebec, Canada, or the European Union, those rights are guaranteed by law, and you also have the right to complain to your regulator: the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or your national data protection authority in the EU. I would rather you told me first, but the option is yours.
Security, and what happens if it fails
The site is served over HTTPS and the form is submitted over an encrypted connection. There is no database on this site, so there is no store of enquiries to breach: messages live in my email.
If a breach ever happens that creates a real risk to you, I will tell you and the relevant regulator, and I keep a record of any incident.