Privacy Policy
The short version: this site uses self-hosted, cookieless analytics and a random browser identifier for project counters. Contact details are collected when you send a message. If the shop is available, account and order details are collected when you choose to sign in or buy something.
TL;DR
There are no advertising profiles or cross-site tracking. Public preferences, checklist progress and an anonymous counter ID live in local storage; the counter ID is hashed on the server. Contact, account and order details are collected only when you choose to use those features.
Who runs this site
calebmakes.com is a personal portfolio and project documentation site run by Caleb, an Australian maker. If you have a question, privacy request or complaint, you can reach me through the contact form on this site.
Anonymous site data
This site uses a self-hosted Umami installation for aggregated usage statistics such as pages visited, referring site, browser and device type, and an approximate country derived from your network address. Umami uses your IP address to determine approximate location but does not store it. Project view and download counters use a random first-party identifier stored in your browser. The server converts it to a one-way keyed hash before storing it; the counter database does not store your IP address or user-agent. This anonymous information cannot be used by me to identify you.
Cookies and local storage
The site stores your theme, guide mode, dismissed guide-tip status, checklist progress, viewed-project markers and the random counter identifier in local storage. Preferences and checklist progress remain on your device. The random identifier is sent only when recording a project view or download and is hashed before storage. When the shop is available, signing in to an account uses a secure, HTTP-only session cookie. Visitors who do not sign in do not receive an account cookie.
What is not used
- No cross-site tracking
- No device fingerprinting
- No advertising profiles
- No sale of visitor data
How analytics data is used
Analytics data is used solely to understand which pages are visited and how people find the site. It is not sold, used to build advertising profiles or used for cross-site tracking.
Email provider and overseas processing
Contact messages are delivered to and stored in my Fastmail inbox, so Fastmail processes the information in those messages as my email provider. Fastmail may process that information in countries outside Australia under its own privacy and security arrangements. This site does not use Google Analytics or an advertising analytics platform.
Contact form
If you use the contact form, the name, email address, subject and message you provide are sent to my Fastmail inbox so I can reply. Fastmail processes that message as my email provider. Do not submit information you do not want included in an email.
Accounts, orders and payments
When the shop is available, you can create an account using an email address and password. I store your email address, a secure salted password hash, email-verification status, sign-in records and orders attached to the account so you can sign in and view your purchases. Plaintext passwords are never stored. Stripe processes checkout and payment information. I do not receive or store your full card number. Guest checkout remains available.
How long data is kept
Anonymous analytics and project-counter records may be retained to measure long-term project and site trends. Counter records are removed when their associated project is deleted. Contact messages are kept in Fastmail for as long as they are reasonably needed to respond and maintain the conversation. Account and order records are kept while the account is active and for any additional period required for payment, tax, fraud-prevention or legal obligations.
Your choices, rights and complaints
You can block the analytics script, clear this site’s local storage, use guest checkout, or avoid the contact form without losing access to public projects. You can use the contact form to ask about a contact message, account or order associated with your email address, or request an appropriate correction or deletion. Some order records may need to be retained for payment, tax, fraud-prevention or legal obligations. Anonymous analytics and project counters cannot be linked to a particular visitor, so I cannot retrieve or delete those records for an individual.
How information is protected
Reasonable technical and access controls are used to protect the site and the information it handles. No internet service can guarantee absolute security, so please avoid sending sensitive information through the contact form.
Third-party content
The site does not use advertising scripts or embedded social-media widgets for behavioural tracking. YouTube, GitLab, Discord and other external websites receive information according to their own privacy policies only when you choose to follow those links.
Changes to this policy
If this policy changes in a meaningful way, the "last updated" date at the top will be updated. Changes apply from the updated date shown on this page.