Legal

Privacy policy.

Plain-language summary of what reesalena.com collects, how it is used, and your rights.

This is the privacy policy for reesalena.com (the "Site"). It describes what personal information the Site collects, how it is used, and your rights. The Site is a personal portfolio for Rees Alena, an independent web developer based in Kansas City, MO, USA.

What is collected

  • Contact form submissions. When you use the contact form, the Site collects the name, email address, project type, budget range, and message you submit.
  • Server access logs. The Site is hosted on Cloudflare Pages. Cloudflare logs basic request data (IP address, user agent, requested URL, timestamp) for security and abuse prevention. See Cloudflare's privacy policy for details: cloudflare.com/privacypolicy.
  • Anti-abuse rate-limit data. To prevent contact-form spam, your IP address is stored in a Cloudflare Workers KV namespace alongside a submission counter. This entry expires automatically after one hour.
  • Analytics preference. Your analytics choice is stored in your browser's local storage so the Site can remember whether you have opted out.

What is not collected

  • No advertising or remarketing pixels are enabled. Ad-related consent remains denied in the implementation shipped by the Site.
  • No cookies are set by the Site itself beyond analytics. Cloudflare may set technical cookies for security purposes (e.g. __cf_bm); see their policy linked above. If you opt out of analytics, no analytics cookies are set.
  • No e-commerce. The Site does not sell anything and does not process payments.

Analytics and consent

The Site uses Google Tag Manager to manage analytics tags. Analytics are enabled by default. Tags configured in Google Tag Manager may collect page URLs, page titles, referrers, browser/device context, and interaction events such as navigation clicks, portfolio interactions, outbound project-link clicks, and contact-form conversion states.

  • Contact-form contents, including your name, email address, and message body, are not sent to analytics.
  • No advertising or remarketing pixels are enabled. Ad-related consent remains denied regardless of your analytics preference.
  • If you opt out, Google Tag Manager and all analytics tags are blocked for your session and no analytics data is sent.

You can opt out at any time using the Privacy settings control in the footer. EU, UK, and California residents also have the rights described below.

How information is used

Contact form submissions are delivered to a private inbox via Resend, an email delivery service. Submissions are used solely to reply to your inquiry. They are not sold, traded, or shared with any third party for marketing.

If you opt in to analytics, interaction data is used to understand which pages and calls to action are being used so the Site can be improved over time.

How information is shared

Personal information is shared only with the service providers required to operate the Site:

  • Cloudflare Pages — hosting and delivery.
  • Cloudflare Workers KV — rate-limit storage.
  • Resend — contact-form email delivery.
  • Google Tag Manager — analytics tag delivery after consent. Any analytics tags published through the GTM container only load after you opt in.

Information may also be disclosed where required by law, in response to a valid legal process, or to protect against fraud or abuse.

Your rights

If you are a resident of the European Economic Area, the United Kingdom, or California, you have rights regarding your personal information:

  • EEA / UK (GDPR & UK GDPR). You may request access to, correction of, or deletion of personal information; you may object to processing; you may request data portability. Reference: Regulation (EU) 2016/679.
  • California (CCPA / CPRA). You may request disclosure of categories of personal information collected, deletion of personal information, and the right to opt out of sale (the Site does not sell personal information). Reference: California Civil Code §1798.100.

To exercise any of these rights, use the contact form. Requests are handled within thirty days.

Data retention

Contact form messages are retained in the recipient's inbox indefinitely unless deletion is requested. Rate-limit entries expire automatically after one hour. Cloudflare access logs are retained per Cloudflare's standard policy.

Do Not Track

The Site does not respond to Do Not Track signals as a separate control. If you do not want analytics, use the Site's privacy settings and keep analytics disabled.

Children

The Site is not directed to children under 13, and no information is knowingly collected from children.

Changes

This policy may be updated to reflect changes in practice, services used, or applicable law. Material changes will be reflected in the "Last updated" date above.

Contact

For questions about this policy, use the contact form. For analytics choices, you can also use the Privacy settings control in the footer.