1. Who We Are

This website, https://josh.is, is operated by Josh Klein (“we,” “our,” or “us”).
For any privacy-related questions or requests, contact privacy@josh.is.
We process data in accordance with applicable privacy regulations, including the EU GDPR, using secure third-party service providers.

2. Information We Collect

We collect only the information necessary to operate and improve this site and related services:

• Analytics data: Anonymous information such as page views, device type, and approximate location (city-level).
• Voluntary submissions: Information you provide when contacting us, such as your name, email address, or organization.
• Newsletter subscriptions: Email address and engagement metrics if you choose to subscribe.

We do not collect sensitive personal data or payment information.

3. How We Use Information

We use collected information to:

• Understand aggregate visitor behavior and improve site content.
• Communicate with subscribers and contacts who have opted in.
• Maintain site security and prevent misuse.

We never sell, rent, or share personal data with third parties for advertising or marketing.

4. Analytics and Cookies

This site uses Google Analytics 4 for aggregated usage statistics.
GA4 does not store IP addresses and does not identify individual visitors.
Analytics data is processed by Google under the Google Data Processing Terms and Standard Contractual Clauses (SCCs).

You may block or delete analytics cookies at any time through your browser settings.

5. Legal Basis for Processing

For visitors in jurisdictions with privacy legislation (e.g., GDPR, UK DPA), processing is based on legitimate interest—the minimal collection required to analyze aggregate site activity and maintain functionality.

6. Data Retention

Analytics data is retained for up to 14 months and then automatically deleted.
Contact and subscription data are stored only as long as necessary to provide requested communications or until you unsubscribe.

7. Your Rights

You may:

• Request access to or deletion of your personal data.
• Request correction of inaccurate data.
• Object to or restrict processing.
• Withdraw consent at any time.

To exercise these rights, email privacy@josh.is.

8. Data Security

We use HTTPS encryption, reputable cloud infrastructure, and restricted administrative access to protect all stored information from unauthorized use or disclosure.

9. Data Transfers

Some data (e.g., analytics or email subscriptions) may be processed by trusted third-party providers such as Google LLC and Ghost Foundation Ltd.
These providers operate under GDPR-compliant safeguards including SCCs to ensure lawful international transfers.

10. Updates to This Policy

This policy may be updated periodically. The latest version will always be available at https://josh.is/privacy.
Continued use of the site after any update constitutes acceptance of the revised terms.

Contact

For all privacy inquiries or data requests, email privacy@josh.is.