Privacy policy
Nondescripts is one person in Ventura, California. This policy is written to be read, not to be survived. If anything here is unclear, email me and I will fix the wording.
What is collected
Three things, and nothing else.
Information you type into a form
If you use the contact form or request a Snapshot, you give me your name, your email address, and whatever else you choose to write. If you send a link to your site or upload a file for review, I have that too. This is voluntary. You can email me directly at contact@nondescripts.com instead and skip the form entirely.
Information your browser sends
Every web server receives basic technical data as a condition of delivering a page: your IP address, browser and operating system, the page you requested, and the page you came from. This is standard, unavoidable, and used for security and troubleshooting.
Analytics, if you allow it
This site uses Google Analytics 4 to count page views and understand which pages are actually read. It runs only if you accept analytics cookies. If you decline, or if you never answer, Google Consent Mode sends an anonymous, cookieless signal instead. Nothing is written to your device and nothing identifies you. IP anonymisation is on and Google advertising features are off.
Why it is collected
- To answer you. If you write to me, I need your email to write back.
- To do the work. If you hire me, I need your files, brand assets, and contact details to deliver the project.
- To improve the site. Knowing which pages get read tells me what to write more of.
- To keep it running. Server logs are how spam and abuse get caught.
I do not sell your information. I do not share it with advertisers. I do not build a profile of you, and I do not buy data about you from anyone else.
Cookies and analytics
Strictly necessary cookies remember your cookie choice and keep forms secure. They are set on this domain only and cannot be switched off without breaking the site. Analytics cookies are entirely optional and off until you say otherwise. The full inventory, names, purposes and lifespans, is on the Cookie Policy page, and you can change your mind at any time using the Cookie preferences link in the footer of every page.
Do Not Track
Some browsers can send a “Do Not Track” signal. There is still no industry standard for how a site should respond to one, so like most sites this one does not change its behavior based on the DNT header. That is not a loophole: analytics on this site are off by default regardless of what your browser sends, and stay off unless you explicitly accept them. Declining in the cookie banner is the control that actually works, and it is honoured absolutely.
Where your browser sends a Global Privacy Control (GPC) signal, it is treated as a decline.
Who it is shared with
A small number of service providers process data on my behalf. They are bound to use it only to provide their service:
- The site host, serves these pages and keeps access logs.
- Google Analytics, page-view analytics, only with your consent.
- The email provider, delivers form submissions.
- Cloudflare Turnstile, checks that the contact form is being sent by a person and not a bot. It runs only on pages with the form, sees no personal data, and sets no tracking cookie.
- Cloud storage, where project files live during an engagement.
Beyond that, information is disclosed only if the law requires it, or if it is necessary to protect someone's safety or my legal rights. If the business were ever sold or transferred, client information would move with it, and you would be told before that happened.
How long it is kept
- Inquiries that do not become projects, deleted after two years.
- Client project files and correspondence, kept for seven years, which is what tax and professional-liability records require.
- Server logs, rotated within 90 days.
- Analytics data, retained by Google for 14 months, then deleted automatically.
Your choices and rights
You can ask me to tell you what I hold about you, correct it, delete it, or send you a copy. Email contact@nondescripts.com and I will respond within 30 days. There is no charge and no form to fill in.
There is no mailing list. Nondescripts does not send a newsletter and has no signup form, so there is nothing to unsubscribe from. If that ever changes this section will say so before a single email goes out.
On CCPA and CPRA. California's consumer privacy laws apply to businesses above thresholds, roughly $25 million in annual revenue, or data on 100,000+ consumers, or earning half of revenue from selling personal information. Nondescripts meets none of them, so those laws do not currently apply.
The rights above are offered anyway, because they are the right way to behave and because I would rather already be doing it than have to start.
Security
The site is served over HTTPS. Access to client files requires multi-factor authentication. Anything genuinely sensitive should not be sent through a web form or plain email, tell me and I will set up a secure transfer instead. No system is perfect, and I would rather say that plainly than promise otherwise.
Children's privacy
This is a business-to-business site. It is not directed at anyone under 16 and I do not knowingly collect information from children. If you believe a child has sent me information, email me and I will delete it.
Changes to this policy
When the substance of this policy changes, the effective date at the top changes with it and the previous version is kept on file. If a change materially affects how your information is handled and I have your email address, I will tell you directly rather than quietly editing the page. Continuing to use the site after a change means you accept the current version.
How to reach me
Jon May, Nondescripts
Ventura, CA 93004
contact@nondescripts.com
(805) 380-8857
Effective September 3, 2026.