Privacy Policy
This policy covers the chrisbrock.io website and the mobile apps published by Chris Brock LLC for a general audience. Apps directed at children have their own notice.
Who is responsible
Chris Brock LLC, a Georgia limited liability company, publishes this website and the apps described below. For anything in this policy, write to privacy@chrisbrock.io.
Apps for children
MailDash is directed at children and collects no personal information from anyone. It is covered by a separate notice, and nothing in this policy about advertising or analytics applies to it: MailDash Children's Privacy Notice.
The website
Analytics, only if you allow it
On your first visit the site asks whether you will allow Google Analytics 4. Nothing loads until you say yes. If you decline, or ignore the prompt, no analytics script is loaded, no analytics cookies are set, and the site works identically. When you do allow it, Google Analytics runs with IP anonymization and Google Consent Mode, and it tells me which pages people find useful.
Your choice is stored in your browser's local storage under the key cb-consent.
That is not a cookie and it is not sent anywhere. Clearing your site data resets it. Apart
from the analytics cookies you explicitly allow, this site sets no cookies at all.
The contact form
The contact form collects your name, your email address, and your message, and sends them to me as a single email. That is the whole purpose. You are not added to a mailing list, and the message is not shared or sold. The form is protected by Cloudflare Turnstile, which performs a bot check without profiling you, and the email is delivered by Resend, which processes the message in order to send it.
Hosting
The site is static and served by Cloudflare, which processes IP addresses transiently to deliver pages and mitigate abuse, as any host does. There is no server-side database of visitors, no advertising, no cross-site tracking pixels, and no third-party fonts or scripts loading in the background.
Apps for a general audience
Apps published by Chris Brock LLC for a general or mature audience may do the following. Each of these depends on your consent, and none of it happens if you decline.
- Advertising. These apps may show ads. Personalized advertising is used only where you have granted permission, through App Tracking Transparency on iOS or an equivalent consent prompt on other platforms. If you decline, you see only contextual ads, which are chosen without using information about you.
- Analytics and attribution. These apps may use third-party analytics and attribution services to understand how the app is used and where installs come from, again only where you have granted that permission.
- The device advertising identifier. Your device's advertising identifier (IDFA on iOS, GAID on Android) is read only where you have granted permission. If you decline, it is not read.
Purchases in any app are processed by Apple, Google, or Amazon. Chris Brock LLC never receives or stores your payment card details.
Why this information is processed
Under the GDPR and UK GDPR, the legal bases are:
- Consent for website analytics, and for app advertising, analytics, attribution, and reading the advertising identifier. You may withdraw consent at any time, on the website by clearing your site data, and in an app through your device privacy settings.
- Legitimate interests for keeping the site and apps secure, preventing abuse, and fixing defects.
- Performance of a contract for delivering an app you have installed and any purchase you choose to make.
Who else receives information
- Cloudflare, hosting and bot protection for the website.
- Resend, delivery of contact form emails.
- Google Analytics, website analytics, only with your consent.
- Advertising, analytics, and attribution providers for general-audience apps, only with your consent.
- Apple, Google, and Amazon, app distribution and payment processing.
These providers process information on Chris Brock LLC's behalf or as independent controllers of their own services. Information may also be disclosed where the law requires it.
Personal information is not sold
Chris Brock LLC does not sell personal information and does not share it for cross-context behavioural advertising as those terms are defined by the California Consumer Privacy Act as amended by the CPRA. No personal information has ever been sold.
How long information is kept
- Contact form emails are kept as long as the correspondence is useful, and deleted on request.
- Website analytics, where allowed, are retained according to the Google Analytics retention setting for the property and are held in aggregate form.
- App analytics and advertising data, where allowed, are retained according to each provider's policy.
Security
The website is served over HTTPS with strict transport security and a content security policy, and it is static, which removes most classes of server-side risk. No method of transmission or storage is perfectly secure, and no system can be guaranteed against every possible failure.
International transfers
Chris Brock LLC operates in the United States, and the providers listed above operate globally. If you use the website or an app from outside the United States, your information may be processed in the United States or elsewhere. Where that involves transferring personal data out of the European Economic Area or the United Kingdom, the providers rely on transfer mechanisms such as the European Commission's standard contractual clauses.
Your rights
If you are in the European Economic Area or the United Kingdom, you have the right to access the personal data held about you, to have it corrected or erased, to object to or restrict its processing, to data portability, and to withdraw consent at any time. You also have the right to complain to your national data protection authority.
If you are a California resident, you have the right to know what personal information is collected and how it is used, to request its deletion, to correct inaccurate information, to opt out of the sale or sharing of personal information (noting that no personal information is sold or shared), and not to be discriminated against for exercising any of these rights.
To exercise any of these rights, write to privacy@chrisbrock.io. You will get a response within 30 days. Because the website and apps collect so little, a request may need enough detail to identify what to look for, and in some cases there will simply be nothing held.
Changes to this policy
If practices change, this page is updated and the "last updated" date at the top changes with it. Material changes will be noted on this page.
Contact and governing law
Chris Brock LLC, a Georgia limited liability company. Privacy enquiries: privacy@chrisbrock.io. This policy is governed by the laws of the State of Georgia, United States, without regard to its conflict of laws rules.