Privacy Policy

The short version

I use this site to share my work and hear from people who want to work with me. There are no ads or advertising pixels. If you send an intake request, I receive your details by email. Private resume links record views, and browser storage keeps resume access and my owner settings. Optional Work with me analytics runs only when configured and respects Do Not Track and Global Privacy Control. When enabled, built-in Replit analytics records page views and a few clicks; those signals stop the click events.

What is collected

Browsing the public pages: no analytics cookies or persistent browsing identifiers are stored in your browser. When configured, Work with me sends page views and form or payment-link interaction events to PostHog. A random identifier held only in page memory groups those events. No names, email addresses, form text, or referring URLs are sent to PostHog. Payment-link clicks are not evidence of completed payments.

Built-in Replit analytics: when analytics is enabled for the published site, Replit records page views with the page address, title, and any query string (such as a private resume link's label), the referring site, browser, operating system, device type, screen size, language, and approximate location. Replit groups views into approximate visitors using IP address and browser details, and that grouping resets each month. The site also sends Replit a few click events: links to the contact page, social profiles, project sites, and other websites, and bio copies on the press page. They record only which link, project, network, or website was used and where it sat on the page. Work with me, private resume, and owner pages send none. Do Not Track and Global Privacy Control stop these click events, but Replit's page-view counting is controlled by Replit and may continue.

Opening a labelled private resume link: each time a valid labelled resume link is rendered, a page-view row is recorded. Revisiting or refreshing the link creates another row. Each row holds which resume version was opened, your browser's user-agent string, the referring URL if your browser sent one, and a random per-view token. The token is generated fresh from crypto for each view and is not derived from your IP address, your device, or anything else about you — the token itself does not identify you or connect visits. A labelled link and its referring URL may still provide context about who received it. Your IP address is not recorded.

Signing in: only I have an account. If you are not signing in as the site owner, this does not apply to you.

Intake requests

When you send an intake request, I collect the contact details, company and role, links, product context, engagement and payment preferences, and notes you choose to submit. Referral information includes campaign parameters and the referring page, when available. These details are used only to respond to your request and arrange the conversation.

Requests are delivered through Resend to my email inbox. There is no intake database. Emails are deleted after 12 months, or after 90 days if I decline the request. This includes delivery-provider and inbox copies. You can ask for earlier deletion by replying to the acknowledgement.

Abuse controls use a salted hash of your IP address, not the raw address. The intake page has no advertising pixels. Do not include passwords, credentials, or confidential customer data in the form.

Cookies and local storage

The application does not set cookies. It uses browser local storage in a few limited cases. After a successful passcode unlock for a protected resume, it stores a resume access token so the browser can validate access on a later visit; that token is sent only to the resume access service when validation is needed. My owner sign-in session is also kept in browser local storage. The portfolio saves your decorative motion preference on this device. The site owner's timeline editor may also save timeline drafts in that browser. Those drafts are an authoring convenience and do not change the public timeline. Earlier, unused local-storage keys can be cleared on the Privacy Center page. You can clear any local data at any time through your browser's settings.

Portfolio guide

“Ask about Sunny” finds excerpts from public portfolio content in your browser. Questions and answers stay in page memory; they are not sent to a model, an inbox, or an analytics service. Start over clears the conversation. Leaving the page or reloading also clears it. The guide does not save a transcript in browser storage.

Do Not Track and Global Privacy Control

Do Not Track and Global Privacy Control suppress the optional Work with me analytics and the site's click events. Replit's page-view counting may continue. You can still submit an intake request when either signal is enabled. The information you explicitly submit is needed to reply to you.

Children

This site is aimed at adults — recruiters, founders, investors and collaborators — and is not directed to children. No account can be created here, and the site does not knowingly collect personal information from anyone under 13. If you believe a child has provided personal information through this site, contact me and I will delete it.

SayMake, the product described on this site, is a separate service with its own privacy policy and its own protections for children. This policy covers only sunnypatneedi.com.

Who else sees this data

The site runs on Replit, which also provides the built-in analytics when it is enabled. Supabase stores existing resume-related site data, not intake requests. Resend delivers intake emails, and PostHog receives the optional Work with me analytics events when configured. Nothing is sold, shared with advertisers, or used to build a profile of you.

Your choices

To request deletion of a resume-view record, or to ask what is held, email me and reference the link you were sent. I may need that link to locate the records; labelled links and referring URLs can provide identifying context.

Changes

If this policy changes, the effective date above changes with it. There is no archive of previous versions.