Privacy Policy

Last updated: June 21, 2026

The short version

I'm Brian Reisman, and this is the privacy policy for brianreisman.me. Here's what you need to know in plain English:

• The only personal information I actively collect is your email address, and only if you choose to give it to me by subscribing to my newsletter.
• I use Kit (formerly ConvertKit) to send those emails. Kit stores your email on my behalf.
• I will never sell, rent, or share your email with anyone. Ever.
• You can unsubscribe at any time by clicking the link at the bottom of any email I send.
• If you want me to delete your data, email me at brian@brianreisman.me and I'll take care of it.

The rest of this document explains the details, including the rights you have under laws like the EU's GDPR, the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA).

Who runs this site

This website is operated by Brian Reisman, an individual based in Austin, Texas, USA. You can reach me about anything in this policy at brian@brianreisman.me.

For privacy questions, I am the "data controller" of your personal information under GDPR.

What I collect, and why

Information you give me

Your email address, when you subscribe to my newsletter. I use it to send you the newsletter, which may occasionally include promotions for my own products or services. I do not send you marketing for third parties.

If you email me directly, I also have whatever you put in that email. I keep correspondence for as long as it's useful and delete it when it isn't.

Information collected automatically

When you visit the site, my web host (Vercel) and any embedded third-party services automatically receive standard technical information that's part of how the web works:

• Your IP address
• Your browser type and version
• The pages you visit and when
• The site or search that referred you

This is logged for security, abuse prevention, and basic performance, not to build a profile of you.

If I add analytics in the future

I do not currently use website analytics. If I add a tool like Google Analytics, Plausible, Fathom, or similar, I will update this policy before turning it on and describe what it collects. I'll favor privacy-respecting analytics where possible.

If I add affiliate links or sponsored content in the future

I do not currently run affiliate links or sponsored content. If that changes, I will clearly disclose it in the relevant post or page. Some affiliate programs (like Amazon Associates) use cookies to track whether a purchase came from my link. If I join one, I'll update this policy.

Cookies and similar tracking

Right now, this site itself does not set tracking cookies. However:

• Vercel may set a small number of essential cookies to keep the site running and secure.
• Embedded content (see the next section) may set its own cookies when you interact with it.

If I add analytics or other tools that use cookies for non-essential purposes, I will add a cookie notice and (for EU/UK visitors) ask for your consent before they load.

Embedded content from other sites

Pages on this site may contain embedded content from other services, most commonly YouTube and Instagram. Embedded content behaves exactly as if you had visited the other site directly. That means those services can:

• See that you loaded a page with their embed on it
• Set their own cookies
• Collect data about your interaction with the embedded content, possibly tied to an account if you're logged in

I don't control what they collect. Their own privacy policies apply:

• YouTube (Google): policies.google.com/privacy
• Instagram (Meta): privacycenter.instagram.com

Who I share your information with

I do not sell your data. I do not share your email list with anyone. Full stop.

I do use a small number of trusted service providers to actually run the site and newsletter. They process data on my behalf, under contracts that require them to protect it:

• Kit: stores my newsletter list and delivers emails (kit.com/privacy)
• Vercel: hosts the website (vercel.com/legal/privacy-policy)

I will only ever disclose your information outside this list if I'm legally required to (for example, a valid subpoena) or if it's necessary to protect rights, safety, or property.

Where your data is stored

I'm based in the United States, and so are my service providers. If you're visiting from the EU, UK, or anywhere outside the US, your information will be transferred to and stored in the US. US data protection law differs from yours. My providers (Kit, Vercel) use standard contractual clauses or other approved mechanisms for these transfers.

How long I keep your data

• Newsletter subscribers: I keep your email on the list until you unsubscribe or ask me to delete it. If you unsubscribe, Kit retains a suppression record so you don't accidentally get re-added.
• Direct emails to me: kept as long as the conversation is relevant, then deleted.
• Server logs: retained for a short period by Vercel for security and operations.

Your rights

Depending on where you live, you have specific rights over your personal information. I honor these rights for anyone who asks, regardless of where you live.

If you're in the EU, UK, or EEA (GDPR / UK GDPR):

• Access: get a copy of the data I have about you
• Rectification: correct anything that's wrong
• Erasure: ask me to delete your data (the "right to be forgotten")
• Restriction: ask me to pause processing
• Portability: get your data in a portable format
• Objection: object to processing, including direct marketing
• Withdraw consent at any time
• Lodge a complaint with your local supervisory authority

My legal bases for processing your data under GDPR are: your consent (for the newsletter), and my legitimate interests (for basic site operation and security).

If you're in California (CCPA / CPRA):

• Know what personal information I collect about you and how it's used
• Delete the personal information I have about you
• Correct inaccurate personal information
• Opt out of "sale" or "sharing" of personal information, though I don't sell or share your information in the first place
• Non-discrimination for exercising your rights

I do not knowingly collect or process sensitive personal information as defined under CCPA.

If you're in Texas, Virginia, Colorado, Connecticut, or another US state with a comprehensive privacy law:

Similar rights generally apply. Email me and I'll honor them.

To exercise any of these rights

Email brian@brianreisman.me. I'll respond within the timeframe required by the law that applies to you (typically 30 to 45 days). I may need to verify it's actually you before acting.

Children

This site is not directed to children under 13, and I don't knowingly collect personal information from them. If you're a parent and believe your child has subscribed to my newsletter, email me and I'll delete the record.

Security

I take reasonable steps to protect your information, and I use service providers (Kit, Vercel) that maintain industry-standard security. No system is 100% secure, but I do not store payment information or other sensitive data on this site at all, which keeps the risk profile small.

Changes to this policy

If I change this policy, I'll update the "Last updated" date at the top. For meaningful changes, for example adding analytics or affiliate links, I'll be more visible about it, either on the site or in the newsletter.

Contact

Questions, requests, or concerns about this policy or your data: