Privacy Policy

1 · What I collect

Only what you send me. If you use the contact form, I receive the name, email address and message you enter. If you email me directly, I receive whatever your message contains.

The site itself sets no advertising or tracking cookies, runs no advertising network, and does not build behavioural profiles of visitors.

2 · What is collected automatically

The site is hosted by Netlify, which records standard server logs — IP address, browser type, requested page, timestamp — for security, abuse prevention and delivery. These logs are held by Netlify under its own terms and are not used by me to identify individual visitors.

If aggregate, cookie-free traffic measurement is enabled, it counts page views without identifying visitors or tracking them across sites.

3 · Why I use it

To read and answer what you send me, to keep records of correspondence where that is sensible, to operate and secure the site, and to comply with legal obligations. Nothing collected here is sold, rented or traded, and none of it is used for automated decision-making.

Where the GDPR or UK GDPR applies, the legal bases are legitimate interests (answering correspondence, securing the site) and, where relevant, your consent — which you may withdraw at any time.

4 · Who else processes it

A small number of service providers, each acting on my instructions or under their own published terms: Netlify (hosting and form delivery), my email provider, and Substack if you choose to subscribe to the newsletter. Subscribing happens on Substack's platform under Substack's privacy policy, not here — this site keeps no mailing list of its own.

Information may be processed in the United States. Where required, transfers rely on Standard Contractual Clauses or an equivalent safeguard operated by the provider.

5 · How long it is kept

Correspondence is kept for as long as it is useful to the conversation it belongs to, and then deleted. Server logs are retained on the provider's standard schedule. If you ask me to delete your messages, I will, except where I am required to keep them.

6 · Your rights

Depending on where you live, you may have the right to access the information I hold about you, to correct it, to have it deleted, to restrict or object to its use, to receive a copy in portable form, and to withdraw consent. Residents of California and other US states with comparable laws have equivalent rights, including the right not to be discriminated against for exercising them. I do not sell or share personal information as those laws define it.

To exercise any of these, write to hello@keystonespecies.co. If you are in the EU or UK and are not satisfied with my response, you may complain to your local supervisory authority.

7 · Security, children, and changes

The site is served over HTTPS and I take reasonable measures to protect what I hold, though no method of transmission or storage is perfectly secure. This site is not directed to children under 16 and I do not knowingly collect their information.

If this policy changes, the revised version will be posted here with a new effective date. Material changes will be noted at the top of the page.

8 · Contact

hello@keystonespecies.co
Keystone Species Co., Glenwood Springs, CO, USA