Privacy Policy | Damien Komala

The short version

I am one person, not an advertising company. I collect the information you type into the contact form so I can reply to you, plus anonymous analytics so I know which pages are worth keeping. The site assistant sends what you type to Anthropic to generate a reply, and stores none of it. I do not sell your personal information and I never have. There is no mailing list, no lead database, and nothing is passed to a data broker.

What I collect

Information you give me

The contact form asks for your name, email address, company, project scope, budget range, timeline, and your message. All of it is optional in the sense that you can email me directly instead — but if you submit the form, those fields are what get sent.

If you email or call me directly, I hold whatever you chose to include in that message.

The site assistant

Every page carries an assistant you can open and ask questions about my work, services and pricing. It is software, not me, and it is answering from what is already published on this site.

What is sent. The messages you type, and the earlier messages in that same conversation, are sent to Anthropic to generate a reply. Do not put anything confidential in it — if you would not put it in the contact form, do not put it here.
What is stored. Nothing. The conversation lives in your browser and is sent back with each message so the assistant has the thread. It is not written to a database and I cannot read it. Refreshing the page loses it.
What is logged. Not the text. If the assistant tries to say something it is not allowed to say, the service records which rule stopped it — never the message or the reply. Your IP address is held briefly, in memory only, to cap how many messages one address can send in an hour; it is not written to disk and disappears when the service restarts.
Where it runs. As a separate service on Vercel, alongside this site.

None of this happens unless you open the assistant and send a message. Loading a page does not send anything to Anthropic.

Information collected automatically

Analytics. Google Analytics 4 records page views, approximate location (city level, derived from IP), device and browser type, referring site, and interactions such as clicking a contact link or submitting the form. It sets cookies in your browser to distinguish one visit from another.
Server logs. Vercel, which hosts this site, logs standard request data including IP address and user agent for security and reliability purposes.
Advertising click data. If you arrived from a Google Ads advertisement, the link carries a click identifier (gclid) so I can tell that the visit came from an ad rather than a search result.

Why I collect it

To reply to your enquiry and discuss a possible project.
To understand which pages and case studies are actually read, so I know what to improve.
To measure whether advertising is worth continuing, in aggregate — not to build a profile of you.
To keep the site available and defend against abuse.

Who processes it

I use a small number of third-party services. Each one receives only what it needs, and each has its own privacy policy governing its handling of that data.

Resend — delivers contact-form submissions to my inbox. It receives everything you typed into the form.
Anthropic — receives what you type into the site assistant, and generates the reply. It does not receive your contact-form contents or your analytics data. Its privacy policy governs what it does with it.
Google Analytics 4 — receives the automatic analytics data described above. It does not receive your contact-form contents or your assistant conversation.
Google Ads — where advertising is running, it receives aggregated information about ad clicks and site activity. Google may use this to build advertising audiences.
Vercel — hosts the site and processes server logs.
Microsoft 365 — hosts the mailbox your enquiry lands in.

Advertising and analytics choices

Google Analytics advertising features may be enabled on this site, which can allow Google to associate your visit with advertising audiences. Under California law, that may be treated as “sharing” personal information for cross-context behavioural advertising. You can opt out in any of these ways:

Install the Google Analytics Opt-out Browser Add-on.
Adjust your Google Ad Settings.
Use your browser’s tracking protection, a Global Privacy Control signal, or an ad blocker. This site is built to work normally when analytics are blocked.
Email me at designedby@damienkomala.com and ask me to exclude you.

How long it is kept

Enquiries stay in my email for as long as the business relationship or its records require, and are deleted on request.
Analytics data is retained according to the Google Analytics property setting, currently the standard retention window, after which it is deleted or aggregated.
Assistant conversations are not retained by me at all — there is nowhere for them to be kept. What Anthropic retains is governed by its own policy, linked above.
Server logs are retained on Vercel’s standard schedule, for both this site and the assistant service.

Your rights

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information is collected and how it is used, to request a copy of it, to request its deletion, to request correction of inaccurate information, to opt out of sale or sharing, and not to be discriminated against for exercising any of these rights.

I do not sell personal information, and I do not knowingly share it for cross-context behavioural advertising beyond the Google Analytics advertising features described above — which you can switch off using any of the methods listed there.

If you are in the UK or the EEA, you have equivalent rights of access, rectification, erasure, restriction, portability and objection. My lawful basis is your consent when you submit the form, and legitimate interest for security logging and aggregate analytics.

To exercise any of these, email designedby@damienkomala.com. I will respond within 45 days. I may ask you to confirm the email address the request relates to, so I do not act on someone else’s behalf by mistake.

Security

The site is served over HTTPS. Contact-form submissions are sent over an encrypted connection and go straight to my mailbox — there is no visitor database on this site to breach. The same is true of the assistant: it keeps no conversation history, so there is no transcript store either. No method of transmission over the internet is perfectly secure, so I cannot guarantee absolute security.

Children

This is a business site for adults. It is not directed at children under 13, and I do not knowingly collect their information. If you believe a child has submitted information through this site, contact me and I will delete it.

Links to other sites

The portfolio links to client sites, Figma prototypes, and social profiles. Once you follow one of those links, that site’s privacy policy applies rather than this one.

Changes

If this policy changes materially I will update the date at the top of the page. Continued use of the site after a change means you accept the revised policy.

Contact

Damien Komala
Orange County, California, United States
designedby@damienkomala.com