Last updated: 12 August 2026.
This policy explains what RobbSutton.com collects, why, who else gets to see it, and what you can do about it. It describes what this site actually does, not a generic template — every service named below is one this site really runs.
The site is operated by Robb Sutton, based in Alpharetta, Georgia, United States. You can reach me at rsutton1223@gmail.com or through the contact page about anything on this page.
The short version
- You can read this site without giving me anything. No account, no signup.
- Analytics are on, and you can decline them through the cookie banner.
- If you comment, subscribe, or email me, I get the information you chose to send.
- I do not sell your personal information, and I never have.
- Outbound product links are affiliate links, which set cookies belonging to the retailer, not to me.
What is collected, and when
Automatically, when you visit
Like almost every website, this one records technical information as pages are served: IP address, browser and device type, operating system, referring page, the pages you view, and timestamps. This comes from the web server, from Cloudflare (which sits in front of the site for security and delivery), and from NitroPack (which caches pages so they load faster).
This information is used to keep the site working and to defend it against attacks and abuse. It is not used to build a profile of you.
Analytics
This site uses Google Analytics, connected through the Site Kit by Google plugin, to understand which articles people read and how they found them. It records pages viewed, approximate location derived from IP address, device and browser, and how you arrived.
Analytics cookies are covered by the consent banner. If you decline, they are not set. You can change your choice at any time using the cookie settings control on the site, and you can opt out of Google Analytics everywhere with Google’s browser add-on.
Cookie consent
Consent is managed by CookieYes. It stores a small record of what you agreed to, so you are not asked on every page. That record is what makes it possible to honour a refusal, so it is set regardless of your choice.
Comments
If you leave a comment, WordPress stores the name, email address and website you entered, the comment itself, your IP address, and your browser user-agent string. The email address is not published. An anonymised hash of it may be sent to Gravatar to display an avatar.
Comments are screened for spam by Akismet, which is operated by Automattic. To do that, Akismet receives the comment text along with the name, email, IP address and user-agent submitted with it. Their handling is covered by Automattic’s privacy policy.
Approved comments and their metadata are kept indefinitely so that conversation threads stay readable. Ask me and I will delete yours.
Email you send me
If you email me, I have your address and whatever you wrote. I use it to reply. I do not add it to a mailing list.
The newsletter
The newsletter is hosted on Substack, not here. Subscribing happens on Substack’s site, under their privacy policy, and they hold the subscriber list. Unsubscribing is a link at the foot of every issue.
Sharing buttons
Share buttons are provided by ShareThis. Loading them lets ShareThis see that a browser requested the page, and they may set their own cookies. See ShareThis’s privacy policy.
Affiliate links
Some outbound product links are affiliate links, mainly to Amazon. Clicking one hands you off to the retailer, who sets a cookie so any purchase is credited to this site. That cookie belongs to the retailer and is governed by their privacy policy, not mine. I am told that a sale happened and roughly what category it was in. I am never told who you are or what else you bought.
Full detail is on the Affiliate Disclosure page.
Who your information goes to
The services named above — the web host, Cloudflare, NitroPack, Google, Automattic, CookieYes, ShareThis, Substack, and affiliate retailers — process data on this site’s behalf or as independent controllers of their own. Beyond that, information is disclosed only where the law requires it.
Your personal information is not sold, rented or traded. Under California law, allowing analytics and advertising cookies can count as “sharing” for cross-context behavioural advertising; declining non-essential cookies in the banner turns that off.
Your rights
Wherever you live, you can ask me for a copy of what I hold about you, ask me to correct it, or ask me to delete it. Email rsutton1223@gmail.com. I will respond within 30 days and I will not charge you or treat you differently for asking.
If you are in the UK or EU, you additionally have the right to object to or restrict processing, the right to data portability, and the right to withdraw consent at any time — withdrawal does not affect processing that already happened. The lawful bases relied on are consent for analytics cookies, legitimate interest for site security and basic server logs, and contract or legitimate interest for replying to you.
If you are in California, you have the right to know what is collected and disclosed, the right to delete, the right to correct, and the right to opt out of sale or sharing. There is no sale to opt out of; the cookie banner handles sharing.
You also have the right to complain to your data protection authority if you think I have got this wrong. I would rather you told me first.
How long things are kept
- Comments and their metadata — indefinitely, so threads remain readable. Deleted on request.
- Server and security logs — a short rolling window, typically weeks, then overwritten.
- Analytics — per Google’s retention settings.
- Email — as long as the conversation is useful.
Children
This site is not directed at children under 13 and does not knowingly collect their personal information. If you believe a child has provided information here, email me and I will delete it.
Where data is processed
This site is hosted in the United States, and most of the services above process data there. If you are visiting from outside the US, your information is transferred to the US, which may not offer the same protections as your home country.
Security
The site is served over HTTPS and sits behind Cloudflare. Nothing online is perfectly secure, and I am not going to pretend otherwise — but there is no reason to send me sensitive personal information, and I do not ask for any.
Changes
If this policy changes materially, the date at the top changes with it. Continuing to use the site after a change means you accept the current version.