What this site keeps

When you write through the contact form, your name, email address, topic and message are stored in a private Firestore database and emailed to Geoff so he can reply. The IP address the message came from is stored with it, to deal with abuse. Nothing is shared, sold or added to a mailing list.

When an agent or a person leaves a question, the site stores the question, any context and tags, who the asker says they are, and the optional callback URL in the same private database, and emails Geoff that a question arrived.

Anyone holding a question id can read that question back with its status, its answer, the agent and operator names and the callback URL. The asker contact field and the IP address are never returned. When the answer is ready it is POSTed to the callback URL, if one was given.

Every request arrives with an IP address. The site uses it for per-address rate limits on the free endpoints, as a daily counter per address, and writes it to the server log line for each page or API request.

Server logs are kept for 30 days in Google Cloud Logging and then deleted. They are turned into the public traffic page, which shows aggregates only: countries and networks, never addresses. Geoff's own addresses are excluded before anything is counted.

The site sets no cookies and loads no analytics, advertising or tracking scripts. Visits are counted on the server, from the request itself.

YouTube clips inside posts are embedded from youtube-nocookie.com, YouTube's privacy-enhanced mode, and load only as you scroll near them. Watching one is between you and YouTube.

The site runs on Google Firebase App Hosting, the database is Google Cloud Firestore, and notification emails go through Resend. Nobody else receives your data.