Privacy notice

How this site handles the information you share. Last updated August 2026.

Part 1: my responsibility

What this site collects

If you join the waitlist, this site stores the email address you provide. If you send a message, it stores your email, your name, and the details you choose to share. A booking inquiry through the contact form stores the same, plus whatever you add about the work. If you use the chat to contact me and provide your name and email, the site stores those details and a short summary of the inquiry. That information is used to respond to you and, if you joined the waitlist, to let you know when the site opens to everyone. Nothing else.

Data policy

None of what you submit is sold, rented, or shared with third parties for marketing. It does pass through a handful of companies to reach Lordell, and here is every one of them.

  • Vercel hosts the site, so it sees every request, including your IP address. It also counts the page views.
  • Supabase is the database. Form submissions, chat contact records, and waitlist emails are stored there.
  • Resend delivers the mail, so contact submissions arrive in Lordell’s inbox through it.
  • Anthropic writes the chat assistant’s replies, so your messages pass through their API.
  • Calendly runs the booking form on the calendar page and holds what you type into it.

You can request access to, correction of, or deletion of your information at any time by getting in touch through the contact page.

The chat assistant

Messages you send to the on-site assistant, typed or dictated with the mic, go to Anthropic’s API, which writes the reply, and come back here. Ordinary chat is used to answer your questions and is not written into the site’s first-party analytics. If you decide to contact me through the chat and provide your name and email, the site opens a contact record with those details and a short summary of what you want to discuss. Dictation runs on your browser’s own speech recognition, and some browsers do that by sending the audio to their maker.

Embedded content

Some pages embed third-party content: YouTube, Apple Music, and the Calendly booking widget. When that content loads, the third party may receive your IP address and set its own cookies, under its own privacy policy. YouTube embeds use privacy-enhanced mode, which limits tracking until you press play.

Cookies this site sets

Unlocking the site with the passcode sets one so you stay unlocked, a case study passcode sets one for that study, and dismissing the waitlist prompt sets one so it stays dismissed. None of them follows you to other sites.

Analytics

Page views are counted with Vercel Web Analytics. Each one records the page, the site you came from, your country, region and city, and your browser, operating system and device type. It sets no cookies. Visitors are counted by a hash of the request that resets every day, so the count cannot follow you from one day to the next, or to any other site.

Vercel Speed Insights measures how fast each page loads and settles for the people who visit it: the time to first paint, to the largest thing on screen, to the first response to a tap, and how much the layout shifted. It reports those figures by page and by device type, and nothing about who you are. Same footing as the page counts: no cookies, no profile, and Lordell sees a distribution, not a person.

The site also keeps its own record of how it gets used, stored in its own database and shared with no one: what loaded, how fast, and for how long, how far you scrolled, where clicks land, which cards, controls and photographs drew attention, what got downloaded or shared, and how much the chat got used. Never the words: nothing you type, say, or are answered is recorded in analytics. Each visit gets a random id that dies with the tab, so no two visits can be connected to each other, or to you. Lordell reads totals, never a person.

Contact

Questions about privacy, or requests about your data, can be sent through the contact page.

Part 2: your responsibility

Don’t get Ponied

Ponied, verb: someone else gets your information. Online or in person. Both count.

Here are five ways a pony might get you. Even though the pony is harmless, the security risk isn’t.

  • The desk. You walked away. Your laptop stayed unlocked. Lock your screen before you walk away. Every time.
  • The voice. A voice you know calls. It needs something right now. Hang up. Call the number you already have. Urgency is the tell.
  • The doors. One password. Every account. One password per account. A password manager remembers them.
  • The link. An email says it's your bank. It wants you to sign in. Don't click. Type your bank's address in a new tab.
  • The café. Free café Wi-Fi. You check your bank. Bank on your phone's data, not the room's Wi-Fi. A VPN helps if you're stuck.

01 / 05 · The desk

Objective: protect your information. Don’t get ponied.