Privacy Policy

1. Data Controller

The data controller for this website is TheMrCoder. For any privacy-related enquiries you can contact me at:

Email: [email protected]

2. Information I Collect

This is mostly a static informational website. The one exception is the checklist download form, which is handled by a small server function I run on Cloudflare; what it stores is described in sections 7 and 8. Everything else is collected by the third-party services described below. Google Analytics and Contentsquare load only after you give consent — neither runs until you accept via the consent banner:

• Usage data — pages visited, time spent, browser type, device information, and on-page interactions (e.g. clicks and scroll behaviour) collected by Google Analytics and Contentsquare. This is collected only if you accept analytics via the consent banner, and you can withdraw your consent at any time.
• Contact form submissions — if you submit the contact form, your name, email address, and message are transmitted directly to Formspree (formspree.io), which processes and forwards them to my email inbox. I retain these messages to respond to your enquiry and do not use them for any other purpose.
• Checklist download requests — if you request the AI-Ready FAQ Page Checklist from /faq-checklist/, your email address is sent to Brevo (brevo.com), which stores it, delivers the download link to you, and is used to send you occasional marketing emails about getting a business found by AI tools. The timestamp of your request and the fact that it came from the checklist page are stored alongside it as the record of your consent. You can unsubscribe from the marketing emails at any time.
• Basic traffic measurement — Cloudflare Web Analytics runs on every page of this site. It is cookieless, sets nothing on your device, and records no identifier that could single you out; it counts page views and referrers only. Because it collects no personal data it is not covered by the consent banner and cannot be declined. Cloudflare's privacy policy applies: cloudflare.com/privacypolicy.

3. Cookies & Tracking Technologies

Analytics (Google Analytics and Contentsquare) do not load until you accept them. When you first visit, a consent banner asks whether you accept analytics; nothing tracking-related runs until you do. If you later withdraw consent, tracking stops and related cookies are cleared. You can change your choice at any time.

You can change your cookie preferences at any time using the Cookie Preferences panel.

4. Google Analytics

This site loads Google Analytics 4 only after you accept analytics, operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics collects anonymised usage statistics. IP anonymisation is enabled. Google may transfer data to servers in the United States under the EU–US Data Privacy Framework. You can withdraw consent at any time via the consent banner, which disables Google Analytics and clears its cookies.

You can learn more about how Google uses data at policies.google.com/privacy and opt out globally via the Google Analytics opt-out browser add-on.

5. Contentsquare

This site also loads Contentsquare only after you accept analytics (operated by Contentsquare SAS, 7 rue de Madrid, 75008 Paris, France), a digital experience analytics platform. Contentsquare collects anonymised data about how visitors interact with pages — including clicks, scroll depth, and session replays — to produce heatmaps and usability insights. Data may be transferred to servers outside the European Economic Area under appropriate safeguards. Withdrawing consent via the consent banner opts you out of Contentsquare collection.

You can learn more at contentsquare.com/privacy-policy.

6. Contact Form (Formspree)

The contact form on this site uses Formspree (Formspree Inc.) to process and deliver messages. When you submit the form, your name, email address, and message are sent to Formspree's servers and forwarded to my inbox. Formspree's own privacy policy applies to this processing: formspree.io/legal/privacy-policy. I retain messages only as long as necessary to respond to your enquiry.

7. Checklist Download (Brevo)

The checklist download form at /faq-checklist/ uses Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France) to store your email address and to send you the download link. When you submit the form, your address is transmitted to Brevo's servers along with the date and time of your request and a note that it came from the checklist page — that record is how I demonstrate you asked for the file. Brevo's own privacy policy applies to this processing: brevo.com/legal/privacypolicy.

Your address is used for two things, both disclosed on the form before you submit it: delivering the checklist, and sending you occasional marketing emails about getting a business found by AI tools. It is also kept so I can resend the file if you ask.

If you arrived through a link carrying a campaign tag (a utm_campaign value in the address, for example from a YouTube description), that tag is stored on your Brevo contact record so I can tell which link the request came from.

Brevo records whether an email it sends you is opened, and which links in it you click. It does this with a small invisible image in the message and by routing links through its own domain before forwarding you to the real address. I use it to see whether the checklist is actually reaching people and whether the download link works. Most mail apps can block the image — in Gmail, Settings → Images → "Ask before displaying external images" — which stops the open from being recorded.

Every marketing email carries a one-click unsubscribe link, and unsubscribing stops them immediately. You can also reply to any of them, or email [email protected], to be removed from the list or to have your address deleted outright. Withdrawing consent does not affect the lawfulness of anything sent before you withdrew it.

8. Bot Protection (Cloudflare Turnstile)

The checklist download form is protected by Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA), which checks that the form is being submitted by a person rather than an automated script. Turnstile receives your IP address, browser and device characteristics, and sets a short-lived cookie while the check runs. It does not track you across websites and is not used for advertising. This check is strictly necessary to keep the form from being abused to send mail to other people, so it runs without asking for consent.

Cloudflare's privacy policy applies to this processing: cloudflare.com/privacypolicy. To limit abuse of the same form, a salted one-way hash of your IP address and a salted one-way hash of the email address you entered are stored in my own Cloudflare storage for about an hour to count recent submissions. The salt is a secret held only on the server, so the hashes cannot be turned back into the address or the IP without it. Nothing else about you is kept there.

9. Legal Bases for Processing (GDPR)

• Consent (Art. 6(1)(a) GDPR) — analytics (Google Analytics and Contentsquare) run only after you give your explicit consent via the consent banner. Nothing is loaded or tracked until you accept, and processing continues on the basis of that consent until you withdraw it.
• Legitimate interests (Art. 6(1)(f) GDPR) — essential localStorage items (theme preference and your consent record) are set because they are strictly necessary for the site to function and to remember your cookie choice. These are not used for tracking.
• Contractual necessity (Art. 6(1)(b) GDPR) — contact form data is processed solely to respond to your enquiry.
• Consent (Art. 6(1)(a) GDPR) — the email address you enter on the checklist download page is stored and used to send you the file and the occasional marketing emails described in section 7. Both purposes are stated on the form itself, above the submit button, before you enter anything. The timestamp and source of that request are stored with the address as the record of consent. You can withdraw consent at any time using the unsubscribe link in any marketing email, or by asking me to delete the address.
• Legitimate interests (Art. 6(1)(f) GDPR) — Cloudflare Turnstile and the hashed IP and email submission counters run on the download form because keeping it from being used to send unwanted mail to other people is a necessary protection.

10. Your Rights

Under GDPR and similar regulations you have the right to:

• Access — request a copy of the personal data I hold about you.
• Rectification — ask me to correct inaccurate data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — ask me to limit how I use your data.
• Portability — receive your data in a machine-readable format.
• Object — object to processing based on legitimate interests via the Cookie Preferences panel.
• Withdraw consent — change or revoke your analytics consent at any time via the same panel. Withdrawing consent stops analytics and clears related cookies, and does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, contact me at [email protected]. You also have the right to lodge a complaint with your local data protection authority.

11. Data Retention

Contact form messages are retained only as long as needed to respond to your enquiry and are then deleted. Email addresses collected through the checklist download page are retained in Brevo until you ask me to delete them. The hashed submission counter used to rate-limit that form expires automatically after one hour. Analytics data is subject to Google Analytics' standard retention period (configurable, up to 14 months) and Contentsquare's retention settings as described in their privacy policy. The theme preference in localStorage persists until you clear browser storage. Your analytics consent choice (tmc-consent) is remembered for 180 days if you accept and 10 days if you decline; after it expires, the banner is shown again, and analytics stay off until you choose to accept again.

12. External Links

This site contains links to third-party websites (GitHub, X/Twitter, Instagram). I am not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.

13. Changes to This Policy

I may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the site after changes are posted constitutes acceptance of the updated policy.

14. Contact

If you have any questions about this Privacy Policy or how your data is handled, please reach out:

Email: [email protected]