Privacy Policy

The short version

I use this site to share my work and hear from people who want to work with me. There are no ads or advertising pixels. If you send an intake request, I receive your details by email. Private resume links record views, and browser storage keeps resume access and my owner settings. Optional Work with me analytics runs only when configured and respects Do Not Track and Global Privacy Control.

What is collected

Browsing the public pages: no analytics cookies or persistent browsing identifiers are stored. When configured, Work with me sends page views and form or payment-link interaction events to PostHog. A random identifier held only in page memory groups those events. No names, email addresses, form text, or referring URLs are sent to analytics. Payment-link clicks are not evidence of completed payments.

Opening a labelled private resume link: each time a valid labelled resume link is rendered, a page-view row is recorded. Revisiting or refreshing the link creates another row. Each row holds which resume version was opened, your browser's user-agent string, the referring URL if your browser sent one, and a random per-view token. The token is generated fresh from crypto for each view and is not derived from your IP address, your device, or anything else about you — the token itself does not identify you or connect visits. A labelled link and its referring URL may still provide context about who received it. Your IP address is not recorded.

Signing in: only I have an account. If you are not signing in as the site owner, this does not apply to you.

Intake requests

When you send an intake request, I collect the contact details, company and role, links, product context, engagement and payment preferences, and notes you choose to submit. Referral information includes campaign parameters and the referring page, when available. These details are used only to respond to your request and arrange the conversation.

Requests are delivered through Resend to my email inbox. There is no intake database. Emails are deleted after 12 months, or after 90 days if I decline the request. This includes delivery-provider and inbox copies. You can ask for earlier deletion by replying to the acknowledgement.

Abuse controls use a salted hash of your IP address, not the raw address. The intake page has no advertising pixels. Do not include passwords, credentials, or confidential customer data in the form.

Cookies and local storage

The application does not set cookies. It uses browser local storage in a few limited cases. After a successful passcode unlock for a protected resume, it stores a resume access token so the browser can validate access on a later visit; that token is sent only to the resume access service when validation is needed. My owner sign-in session is also kept in browser local storage. The site owner's timeline editor may also save timeline drafts in that browser. Those drafts are an authoring convenience and do not change the public timeline. Earlier, unused local-storage keys can be cleared on the Privacy Center page. You can clear any local data at any time through your browser's settings.

Do Not Track and Global Privacy Control

Do Not Track and Global Privacy Control suppress the optional Work with me analytics. You can still submit an intake request when either signal is enabled. The information you explicitly submit is needed to reply to you.

Children

This site is aimed at adults — recruiters, founders, investors and collaborators — and is not directed to children. No account can be created here, and the site does not knowingly collect personal information from anyone under 13. If you believe a child has provided personal information through this site, contact me and I will delete it.

SayMake, the product described on this site, is a separate service with its own privacy policy and its own protections for children. This policy covers only sunnypatneedi.com.

Who else sees this data

The site runs on Replit. Supabase stores existing resume-related site data, not intake requests. Resend delivers intake emails, and PostHog receives the optional analytics events when configured. Nothing is sold, shared with advertisers, or used to build a profile of you.

Your choices

To request deletion of a resume-view record, or to ask what is held, email me and reference the link you were sent. I may need that link to locate the records; labelled links and referring URLs can provide identifying context.

Changes

If this policy changes, the effective date above changes with it. There is no archive of previous versions.