Privacy Policy

1. Introduction

This Privacy Policy describes how Alexander Wasson ("I," "me," "my"), a web developer and hosting provider based in the State of Maine, collects, uses, and protects information when you visit AlexanderWasson.dev ("this website"), contact me, or use my services. It is provided as a disclosure of my privacy practices. This policy applies to this website and describes my practices under applicable Maine law; websites I host for clients are governed by my role as described in Section 10 and by each client's own policies.

2. Information I Collect

This is a static website that I host across two locations, so I collect very little information about visitors. Depending on the subdomain, its hosting and traffic path may use Cloudflare, RackNerd, or both. RackNerd acts as a traffic proxy in this setup, and a dedicated IPv4 address may be used. The information I may collect includes:

• Server log data (through my hosting across two locations and, depending on configuration, Cloudflare or RackNerd traffic services): IP address, browser type and version, device type, operating system, referring pages, pages visited, and date and time of requests
• Information you voluntarily provide: your name, email address, and message contents if you email me via the Contact page
• Hosting account information: if I host a website or provide development services for you, I create and maintain one or more accounts for you and may collect your name, email address, and login credentials (such as usernames and passwords for your hosting or website administration access). This account information is stored for as long as you have the service and is used to operate and support your account. I do not store payment card or billing details for any client.
• Preferences stored on your device: your dark-mode preference is stored locally in your browser's localStorage and stays on your device

I do not operate user accounts, and I do not require registration to use this website itself. The hosting accounts described above are created only for paid hosting and development clients and are subject to the applicable hosting agreement.

3. How I Use Your Information

Any information collected is used solely for:

• Responding to your inquiries and correspondence
• Administering and supporting client hosting and development accounts, including account security and credential management
• Improving website content, structure, and user experience
• Monitoring and analyzing site traffic and outages
• Maintaining website security and preventing abuse, attacks, or unauthorized access
• Complying with legal obligations

I do not use your information for advertising, profiling, or any form of automated decision-making.

4. Artificial Intelligence Tools in Website Development

Portions of this website, including some content, code, and design elements, may be created, reviewed, or enhanced with the assistance of artificial intelligence (AI) tools. The data processed by such tools relates to website development materials (such as the site's source code and text content) and does not include personal information about visitors to this website. I do not share, sell, or transmit visitor personal information to any AI tool provider.

5. Third-Party Services

I host this website and client websites across two locations. Depending on the subdomain and configuration, the hosting and traffic path may use Cloudflare, RackNerd, or both. RackNerd acts as a traffic proxy, and a dedicated IPv4 address may be used in that setup. These services may process technical data such as IP addresses, DNS information, and HTTP request data as they handle or proxy traffic. Cloudflare's processing is described in its Privacy Policy, Website Terms, and Data Processing Addendum. Where you email me, your email provider acts as a processor for the transmission and storage of that email, and I am not responsible for the practices of your or my email providers to the extent they are outside my control.

6. Cookies, Local Storage, and Analytics

This website does not use cookies for tracking or advertising, and I do not use third-party analytics that track you across sites. If Cloudflare proxy or security features are enabled, Cloudflare may set essential cookies or similar technology required for security and performance (for example, to mitigate distributed denial-of-service attacks or manage load balancing). These are intended to support site operation and are not used by me to track your activity across other websites. In addition, your dark-mode preference is stored in your browser's localStorage only on your own device and is never transmitted to me. You can clear localStorage and cookies at any time through your browser settings.

7. Data Sharing and Disclosure

I do not sell, rent, trade, or share your personal information with third parties for marketing purposes, and I do not sell your personal information to any third party. I may share or disclose information only to the extent required by law, legal process, or valid government request, or to the extent necessary to operate the hosting I manage across two locations and to route or proxy traffic through Cloudflare, RackNerd, or both as configured. If I am ever involved in a merger, sale, or similar transaction, your information may be transferred as part of that transaction.

8. Data Retention

Server logs from the hosting I manage, and logs generated by Cloudflare or RackNerd when they handle or proxy traffic, are retained only as long as reasonably necessary for security, troubleshooting, abuse prevention, and legal obligations. I cannot control retention by those providers. Emails you send me are retained only as long as necessary to address your inquiry and for legitimate record-keeping purposes. Hosting account information is retained while your account is active and for a reasonable period afterward as needed for security, communication, and legal obligations; on termination your passwords and access are revoked as described in the applicable hosting agreement. Preferences stored in your browser's localStorage remain on your device until you clear them.

9. Data Security

I take reasonable technical and organizational measures to protect the website and the limited information processed through it against unauthorized access, alteration, disclosure, or destruction. Because no method of transmission or storage is completely secure, I cannot guarantee absolute security. If a breach of security affecting personal information occurs, I will comply with all applicable notification requirements of Maine law.

10. Websites I Host for Others

I host websites for third parties ("clients") across two locations. Depending on a site's subdomain and configuration, the hosting and traffic path may use Cloudflare, RackNerd, or both. RackNerd acts as a traffic proxy, and a dedicated IPv4 address may be used in that setup. With respect to those websites, it is important to distinguish between two different kinds of data: client application data (the data a client's website itself collects and controls) and hosting infrastructure data (the technical data processed to make that website work). With respect to those websites:

• Client application data belongs to the client. Forms, accounts, records, uploads, analytics, and any other data that a client's website collects or stores are the client's application data. The client decides what to collect, how to use it, and what to do with it, and the client has full control over it. I do not access, collect, or use that application data as my own, and I am not the controller of it.
• Hosting infrastructure data is processed to run the site. To host, deliver, and secure a client website, I and any traffic services involved (including Cloudflare and RackNerd) may process technical data such as IP addresses, browser and device details, request URLs, and timestamps. This is infrastructure data used to operate the hosting service, not the client's application data, and it is processed at the client's direction as part of providing the service.
• How I handle that infrastructure data. I use technical log data only for operation, security, performance, and abuse prevention, act on it only at the client's direction, do not sell it, and do not use it for my own purposes beyond operating the hosting service. This log data is retained only as long as needed where under my control. RackNerd's and Cloudflare's processing is governed by their own terms and policies, and any arrangements between me and a client are set out in the applicable hosting agreement.
• Development involvement does not change this. The extent to which I helped build a client's website varies by project — for some I built the entire site, for others I built only parts, and for at least one I had no part in its development at all. In every case, visiting a client website does not make me the controller of that site's application data; the client remains responsible for it.
• Breach notification. Because I maintain some personal information on behalf of clients, if a security breach affects personal information I maintain for a client, I will notify that client as required by Maine law (10 M.R.S. § 1349), and the affected client is responsible for notifying the individuals whose information was involved as required by applicable law (10 M.R.S. § 1348).
• This policy does not govern client websites. This Privacy Policy applies to AlexanderWasson.dev only. If you visit a website I host for a client, please review that website's own privacy policy to understand how its own data is handled.

11. Your Rights and Choices

To the extent I hold personal information about you, and subject to applicable law and my obligations to others, I will honor reasonable requests to access, correct, or delete that information, and to object to or restrict its processing. To make such a request, please contact me. I will respond to verifiable requests within the time required by applicable law. This section describes the requests I will honor as a matter of good practice and does not guarantee rights beyond those required by law. If you have questions about data collected by a website I host for a client, please contact that website's operator directly, as I do not control that site's application data.

12. Maine Privacy Law

This policy is intended to describe my privacy practices and my obligations under applicable Maine law, including Maine's Act to Protect the Privacy of Online Consumer Information (10 M.R.S. ch. 220-B), under which I do not sell your personal information, and Maine's notification of security breach law (10 M.R.S. § 1348 and § 1349), under which I endeavor to notify affected individuals and the Superintendent of Consumer Protection as required if there is a security breach affecting personal information. Nothing in this policy is intended to, nor should be read to, guarantee that every obligation of Maine law is satisfied in every circumstance, and nothing in it limits any right or protection provided by law.

13. Children's Privacy

This website is not directed to children under the age of 13, and I do not knowingly collect personal information from children. If you believe a child under 13 has provided personal information, please contact me and I will delete it promptly.

14. Do Not Track

This website does not engage in cross-site tracking, and I do not respond differently to browser "Do Not Track" signals because no such tracking occurs.

15. Changes to This Policy

I may update this Privacy Policy from time to time to reflect changes in law, technology, or the operation of this website. Changes will be posted on this page with an updated revision date, and continued use of the website constitutes acceptance of the revised policy.

16. Contact

If you have any questions or concerns about this Privacy Policy or your data, please contact me.