Legal
Privacy Policy
Last updated: April 8, 2026
Who we are
This privacy policy applies to oliverlibby.com, the personal website of Oliver B. Libby, based in Washington, DC, United States.
Information we collect
When you submit the contact form, we collect: your name, email address, organization (optional), the inquiry type you selected, and the message you sent. We also automatically log the page URL, referrer, IP address, user-agent string, and submission timestamp for spam mitigation and analytics.
We use Google Analytics 4 to measure aggregate site usage. GA4 sets cookies for session tracking and may collect anonymized device, location, and browsing data. You can opt out by enabling Do Not Track in your browser, or by installing the Google Analytics opt-out add-on.
How we use your information
- To respond to your inquiry within 48 hours.
- To detect and prevent spam (honeypot, timing, IP, Cloudflare Turnstile).
- To analyze aggregate site usage and improve content.
We do not sell your personal data. We do not share it with third parties for marketing.
Third-party services
- Forms backend — submissions are processed by an in-house Node.js service that stores entries in a private SQLite database and forwards them via email.
- Cloudflare — DNS, CDN, SSL, and Turnstile bot protection.
- Google Analytics 4 — anonymized usage analytics.
- Google Fonts — Playfair Display and Source Sans 3 web fonts. Fonts are served from Google's CDN.
Cookies
We use a small number of cookies for analytics (Google Analytics 4) and security (Cloudflare). No advertising or tracking cookies are set by oliverlibby.com directly.
Your rights
Under the California Consumer Privacy Act (CCPA) and similar laws, you have the right to access, correct, or delete personal data we hold about you. To exercise these rights, contact us via the contact form or, if available, by email at the address listed in the footer.
We will respond to verified requests within 30 days.
Children's privacy
oliverlibby.com is not directed at children under 13 and we do not knowingly collect personal data from children under 13.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent version. Material changes will be highlighted in a banner on the home page for at least 14 days.
Contact
Questions about this policy? Use the contact form or write to us at our registered address (TODO: legal address pending).