Privacy and termsPrivacy andtermsterms

The live site runs Google Analytics 4 so I can see how many people visit and which pages get read. It records the pages you view, how you arrived, roughly where in the world you are, and what browser and device you use, and it sets first-party cookies to tell one visit from the next.

That's the only tracking there is. No ads, no retargeting pixels, no accounts, and nothing you do while browsing is written to a database. Google is the only other party that sees the analytics, as the provider. If you'd rather not be counted, a tracker blocker or Google's opt-out add-on will exclude you, and the site works exactly the same either way.

The form is the one place you hand over details: what you're getting in touch about, your first and last name, your email address, your company if you give one, and your message. It's sent through Resend, the email provider this site uses, to hello@jeffreycai.com, and Resend sends a copy back to the address you gave so you have a record of what you wrote.

Resend is a United States company, so the email crosses the border on its way to my inbox, as any mail through an overseas provider does. It passes through their systems and is logged there for a short while for delivery and troubleshooting, under their privacy policy.

The contact page runs Cloudflare Turnstile, which checks that a submission came from a person rather than a script. For almost everyone it asks nothing and shows nothing. Cloudflare sees your IP address and some signals about your browser to answer that question, under their privacy policy. It runs on the contact page only.

The server also keeps a brief count of submissions from each IP address, so no one can send dozens in a row. That count lives in memory, is never written down, and is forgotten within ten minutes.

A copy of each message is kept in a database so it can't vanish if an email fails to send. The database is Neon, hosted in Sydney, so the copy stays in Australia. It holds the fields you filled in, when it arrived, whether the email got through, when your copy was sent and whether I've replied. No cookies, no tracking identifier, no IP address and no record of your visit.

It's used to answer you and nothing else: no mailing list, no marketing. When a message is deleted it sits in a trash for 7 days, in case it was deleted by mistake, then it's gone for good. Email hello@jeffreycai.com and I'll delete yours.

The site is hosted on Vercel and served from their Sydney region. Like any host, Vercel keeps standard request logs (IP address, browser, the pages requested) for security and reliability, under their own privacy policy. I don't use those logs to follow anyone around.

You can ask what I hold about you, ask me to correct it, or ask me to delete it. Email hello@jeffreycai.com from the address you used and I'll take care of it. If anything here doesn't match what you've seen the site do, I'd like to hear that too.

The writing, case studies, drawings and design on this site, and the JC logo, are mine unless a page says otherwise. They're here for people weighing up my work. Link to anything you like, and quote a line or two with credit; please ask before republishing anything in full.

Client names are withheld by agreement, which is why the case studies name a sector rather than a business. The figures are results measured on those engagements and reported as accurately as the records allow. They describe what happened there, not a promise of what will happen anywhere else.

The articles are my own views, not those of any employer or client, past or present.

Links out to LinkedIn and other sites lead to pages I don't control, and their own terms and privacy policies apply there. The site itself is provided as it is: I keep it accurate and working, but can't guarantee it's never wrong or never down.

If what the site collects or how it's handled changes, this page changes with it, and the date at the top moves.