Privacy Policy

Who I am

This is the personal website of Nathan Lin, a Worship Director and mix engineer based in New Jersey, USA. You can reach me about anything on this page at [email protected].

What I collect

I only collect what is needed to run this site and the things you choose to use:

• Contact form: the name, email, and message you submit. Handled by Formspree and delivered to my inbox.
• Server logs: standard request logs (IP address, browser user agent, page requested) that Cloudflare keeps briefly for security and abuse prevention.

I do not run advertising scripts, tracking pixels, behavioral analytics, Google Analytics, or any cross-site tracking on this site.

How I use it

Contact form messages go to my inbox so I can reply to you. That is the whole story: there is no mailing list, no marketing database, and no profile of you built from this site.

Where it lives and who processes it

I share data only with the services that help run the site, and only so they can do that job:

• Cloudflare: hosting and edge security.
• Formspree: delivers contact form submissions to my inbox.

I do not sell your data, and I do not share it with anyone beyond the processors above.

Cookies and embedded content

This site sets no first-party cookies of its own and uses no tracking or analytics cookies, so there is no cookie consent banner. Your browser may keep a small preference in local storage if you use an on-page control. That stays on your device and is never used to identify or track you.

YouTube and Spotify players on the Music page do not load when the page opens. They are shown as a placeholder you have to click. Nothing is requested from YouTube or Spotify, and no third-party cookie can be set, until you choose to click and load a player. This is why there is no consent banner: the third-party content only loads on your explicit action.

• YouTube: if you click to load a video, it loads in privacy-enhanced mode (youtube-nocookie.com), and from that point the player may set cookies and collect data per Google's privacy policy.
• Spotify: if you click to load a player, it may set cookies from that point, per Spotify's privacy policy.
• Fonts and scripts: all fonts and JavaScript are served from this site itself, not from a third-party CDN, so no request and no IP address is sent to Google, Cloudflare's CDN, or anyone else when the page loads.

Your choices and rights

No matter where you live, you can:

• Ask what data I hold about you.
• Ask me to correct anything that is wrong.
• Ask me to delete your data.
• Ask for a copy of your data in a portable form, or object to or restrict how it is used.

To make any of these requests, email [email protected] and I will handle it within 30 days, free of charge. I will not discriminate against you for exercising any of these rights.

If you are in the EU, UK, or another place with specific privacy laws (GDPR and similar), the lawful basis for handling your contact form message is taking steps at your request, and the basis for brief security logs is my legitimate interest in keeping the site safe. You also have the right to lodge a complaint with your local data protection authority (in the UK, the ICO; in the EU, your national supervisory authority). I do not have a data protection officer or an EU representative, as I am one person running a small personal site, and you can reach me directly at the address above.

Where your data is processed

This site is hosted in the United States, and the processors above operate primarily from the US. If you contact me from outside the US (for example the EU or UK), your data is transferred to and processed in the US. The processors I use rely on standard data-transfer safeguards (such as Standard Contractual Clauses) in their own terms. By choosing to submit your information, you understand it will be handled in the US as described here.

How long I keep things

Contact form messages are kept only as long as they are relevant to your inquiry. Cloudflare retains server logs briefly under its own standard policy.

Children

This site is not directed at children under 13, and I do not knowingly collect their personal information. If you believe a child has sent me data, email me and I will delete it.

Changes to this policy

I may update this policy from time to time. Changes take effect when posted here, and the "Last updated" date above reflects the most recent revision.

Governing law

This site is operated from New Jersey, USA, and this policy is governed by the laws of the State of New Jersey, without regard to its conflict-of-laws rules.