Privacy Policy

What this site knows about you (not much) and what I do with it (even less).

The Contact Form

The form asks for three things: your name, your email address and your message. There's also a hidden box that only bots can see. If something fills it in, the message quietly goes nowhere. Sorry, robots.

My server turns your message into one email, sent from my own Gmail to my own inbox, with Reply-To set to you. So when I hit Reply, it comes back to you, not to me. The server keeps no copy: nothing is saved to disk. The email then sits in my Gmail like any other email, and I use it for one thing: replying to you. No mailing list, no newsletter, no surprise follow-ups.

The Spam Guard

So nobody can bury my inbox, the server remembers your network (IP) address to count your tries: 5 every 10 minutes. It keeps that in memory only, never on disk, and it's wiped every time the server restarts. Don't take it personally.

The Logs

The form's server runs on Google Cloud, and requests to it get logged there, mostly by Google, automatically. A log line can hold the time, your IP address and what browser you used. It never holds your name, your email address or what you wrote. Google keeps those logs for 30 days, its default.

Analytics

This site uses Google Analytics to count visits and see which pages get read. It sets cookies in your browser so it can tell one visit from another. What Google does with that is covered by Google's own privacy policy. Want out? Google's opt-out add-on stops it, and so does any decent ad blocker. No hard feelings.

Cookies and Your Browser

Apart from analytics (above), the site sets no cookies. The one thing it keeps in your browser is a note of how far down each page you'd scrolled, so the Back button drops you where you left off. That note never leaves your device, and your browser throws it away when you close the tab. Even the fonts come from this site, so no font company hears about your visit either.

Who Else Sees It

Nobody. I don't sell, rent or share anything about you. The only others involved are the Google services that run the site: Gmail, Google Cloud, Firebase Hosting, and Google Analytics when it's on.

Your Google Account

Google asks apps like this one to spell this part out, so here goes. This site never asks you to sign in and never touches your Google account. Its one Google permission is sending email from my own Gmail to myself. The key for that lives in Google Cloud's secret store, and only the form's server uses it. It can't read my inbox, and it definitely can't read yours.

Nora

Everything above is about this website. This part is about Nora, the private assistant I built for myself. It's not a product, you can't sign up, and there is nothing here to log in to. If Google's sign-in screen sent you here, this is the app it meant.

Nora signs in to two Gmail accounts, both run by me. It reads the mail in both, and the calendar and Drive files in my own. So if you've emailed me there, your message is in it.

It all lives on a computer I own, with encrypted backups at Backblaze. If I switch it on for an account, some of that account's mail goes to Claude, an AI made by Anthropic, so Nora can answer my questions. Anthropic keeps what it gets for 30 days. Beyond that, it reaches me, and one person on my team, who can see the business mail and never my personal mail.

Nora also signs in to QuickBooks for the companies I connect and reads their books on a schedule: accounts, customers and vendors, transactions, time entries, balances, profit and loss, and payroll totals. It only reads, and none of it goes to Claude. It stays on that same computer and in those same encrypted backups, and the one person on my team sees only the business numbers built from it and the customer and vendor names, email addresses and phone numbers.

Nora can't send anything to anyone but me, or change anything, unless I approve it first, one at a time. Nothing is sold, and nobody gets an ad because of it.

Nora's License

Intuit asks apps to post an end user license agreement, so here's Nora's. It's short because the user list is short.

I own Nora personally, not through any company. It's private: there's nothing to buy and you can't sign up. The only people licensed to use it are me and the one person on my team I give access to. Nobody else gets a license, including the companies whose QuickBooks books it reads.

Nora comes as is. It reads books and it can get things wrong, so check anything that matters against QuickBooks itself. As far as the law allows, I make no promises about it and I'm not liable for what comes from relying on it.

QuickBooks is Intuit's, and Intuit's own terms still cover your QuickBooks account. Intuit didn't build Nora and doesn't stand behind it, and I don't handle anyone's data on Intuit's behalf.

To cut Nora off from a company's books, disconnect it inside QuickBooks or tell me through the contact form. Either way, Nora stops reading. If a company whose books are in Nora asks me to delete them, I will, though copies in old backups can take up to a year to age out. I can change this agreement or end it whenever I want.

Want It Gone?

Ask through the contact form and I'll delete your messages from my Gmail. Yes, I see the irony of sending me a message to delete your messages. It's the only door I've got.

Last updated November 10, 2026.