Privacy Policy

This describes what operator.codes (the "Site") collects, why, and what you can do about it. Tyler Malin operates the Site and is the data controller for information described here.

What we collect

• Newsletter: your email address, when you subscribe. Nothing else is required to subscribe.
• Build Session applications: your name, email, and whatever project details you submit in the application form.
• Accounts: your email address and authentication data, if you create an account. We don't require a password, you sign in via a magic link.
• Payments: if you purchase a paid tier or a digital product, payment is processed directly by Stripe. We receive and store a reference to your Stripe customer and subscription records, not your full card number.
• API keys: if your tier includes API access, we store a one-way cryptographic hash of your key, not the key itself, along with usage and rate-limit data.
• Server logs: our hosting provider (Vercel) automatically logs standard request data (IP address, browser type, timestamps) for security and operational purposes, the way essentially all web infrastructure does.

We don't run advertising or analytics tracking on the Site. There are no ad-network cookies and nothing here is sold to data brokers.

Cookies

The Site doesn't use cookies for advertising or tracking. If you create an account, a strictly necessary session cookie keeps you signed in. That's the only cookie use on the Site.

How we use it

• Send the newsletter and essay notifications you signed up for
• Evaluate and respond to Build Session applications
• Provide account access, paid-tier content, and purchased downloads
• Process payments and prevent fraud
• Operate, secure, and improve the Site
• Comply with legal obligations

Who we share it with

We don't sell your data. We share it only with the service providers that make the Site work, each acting as a processor on our behalf:

• Resend, for email delivery and the subscriber list
• Vercel, for hosting and file storage
• Supabase, for account authentication and data, where accounts are used
• Stripe, for payment processing, where payments are used

Each of these providers has its own privacy practices governing how they handle data on our behalf.

How long we keep it

Newsletter data is kept until you unsubscribe. Account and purchase data is kept while your account is active and for a reasonable period after, to meet legal, tax, and dispute-related obligations. Build Session application data is kept as long as reasonably needed to evaluate and follow up on it.

Your rights

You can unsubscribe from the newsletter at any time using the link in any email we send. For anything else, access, correction, deletion, or a copy of the data we hold about you, email hello@operator.codes and we'll handle it directly. If you're in the EU or UK, you also have the right to lodge a complaint with your local data protection authority. If you're a California resident, you have rights under the CCPA to know, delete, and opt out of the sale of personal information, though we don't sell personal information in the first place.

Children

The Site isn't directed at children, and we don't knowingly collect personal information from anyone under 13.

International transfers

Our service providers are based in or operate infrastructure in the United States. If you're accessing the Site from outside the US, your data will be processed there.

Security

We take reasonable measures to protect your data, but no method of transmission or storage is perfectly secure, and we can't guarantee absolute security.

Changes to this policy

We may update this policy as the Site changes. We'll update the date above when we do.

Contact

Questions about this policy or your data: hello@operator.codes.