# Privacy Policy

> Privacy policy for The Upstream — how we handle your data


# Privacy Policy

**Last updated:** March 2026

This privacy policy describes how The Upstream ("we," "us," or "our"), a personal technical blog operated by Byron Dupuis-George, handles information when you visit our website.

## The Short Version

This is a static blog. We don't use cookies, we don't run tracking scripts, and we don't collect your personal information directly. Our hosting provider (Netlify) collects basic server logs as part of delivering the site to you. Some fonts are loaded from third-party CDNs, which means those providers receive your IP address when pages load.

## Information We Collect

### Information We Collect Directly

We do not collect any personal information directly from you. There are no:

- Account registrations or login systems
- Contact forms or comment systems
- Newsletter signups or email collection
- Cookies or local storage tracking
- Client-side analytics scripts

### Information Collected by Our Hosting Provider

This website is hosted on [Netlify](https://www.netlify.com/). When you visit any page, Netlify's servers automatically process:

- Your IP address
- Browser type and version (user agent)
- The page you requested
- The referring URL (where you came from)
- Date and time of your visit

This data is collected as part of standard web server operations and is governed by [Netlify's Privacy Policy](https://www.netlify.com/privacy/). We do not have access to individual server logs. Netlify may use this data in aggregate form for analytics and service improvement.

### Third-Party Services

All fonts are self-hosted — no external font CDNs are used. Your browser does not make requests to Google, Vercel, or any other third-party service when loading this site.

## Cookies

This website does not set any cookies. No first-party or third-party cookies are used.

## How We Use Information

We do not collect, store, or process your personal information. The data collected by our hosting provider is used solely for:

- Delivering website content to your browser
- Maintaining website security and performance
- Aggregate traffic analysis (by Netlify, not by us)

## Data Sharing

We do not sell, trade, or otherwise share any personal information. We have no personal information to share. Our hosting provider (Netlify) processes server log data according to their [privacy policy](https://www.netlify.com/privacy/).

## Data Retention

We do not retain any personal data. Netlify retains server logs according to their data retention policies as described in their [privacy policy](https://www.netlify.com/privacy/) and [Data Processing Agreement](https://www.netlify.com/gdpr-ccpa/).

## Your Rights

Regardless of where you are located, you have the right to:

- **Know** what personal data is collected about you
- **Access** your personal data
- **Delete** your personal data
- **Opt out** of the sale or sharing of your personal data

Since we do not collect personal data directly, these rights primarily apply to our hosting and CDN providers. You may contact them directly using the privacy policy links above.

If you are a California resident, you may exercise your rights under the California Consumer Privacy Act (CCPA/CPRA). Note that this site does not meet CCPA applicability thresholds — we do not have annual gross revenue exceeding $25 million, we do not buy or sell personal information, and we do not process data of 100,000 or more consumers. We include this information as a matter of transparency.

## Children's Privacy

This website is not directed at children under the age of 13. We do not knowingly collect any information from children.

## Security

This website is served over HTTPS with modern security headers including HTTP Strict Transport Security (HSTS), Content Security Policy (CSP), and X-Frame-Options protections.

## Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected by an updated "Last updated" date at the top of this page. Continued use of the website after changes constitutes acceptance of the updated policy.

## Contact

If you have questions about this privacy policy, you can reach Byron Dupuis-George via [GitHub](https://github.com/ByronGeorge).