Privacy Policy
What this site collects, why, and what happens to it. Last updated August 30, 2025
The short version
This site is a portfolio and a way to start a conversation. It does not sell anything directly, does not have accounts to log into, and does not sell or share your information with anyone. It collects two things: anonymous analytics about which pages get read, and whatever you choose to tell me if you get in touch.
Who is responsible
EMPYRIA, LLC operates empyria.io. If you want to reach a human about anything on this page, email [email protected] or write to [ mailing address ].
What is collected automatically
Analytics. This site uses Google Analytics to understand which pages people read and roughly where visitors come from. It sets two cookies, _ga and _ga_78HVHRBX3K, which distinguish one browser from another so a returning visit is not counted twice. It does not tell me who you are.
Cloudflare. The site is served through Cloudflare, which sits between you and the server. Cloudflare processes your IP address to route the request and to block attacks, and it collects anonymous performance measurements through Cloudflare Web Analytics. Cloudflare Web Analytics sets no cookies and does not fingerprint your browser.
Server logs. The web host records standard request logs; IP address, timestamp, page requested, browser user agent. These are used for security and diagnosis and are not combined with anything else.
That is the entire list. This site loads no advertising trackers, no social media pixels, no session recording, no chat widgets, and no third-party fonts. Nothing is stored in your browser beyond the two cookies named above.
What you give me deliberately
[ When the contact form exists: If you use the contact form, it collects your name, your email address, and whatever you write in the message. That goes to my inbox and to [ form provider ]. It is used to reply to you and to keep track of the conversation if it becomes a project. It is not added to a marketing list, because there is no marketing list. ]
If we work together, I will end up holding ordinary business records; contracts, invoices, correspondence, and access credentials for your site. Those are kept for as long as the law requires me to keep financial records, and credentials are deleted when a project ends unless you ask me to keep them for care work.
What is never done with it
Your information is not sold, rented, traded, or handed to anyone for their own marketing. There is no data broker in this chain. The only third parties who touch it are the ones named above, each doing a specific technical job.
How long it is kept
Analytics data expires on Google's schedule, currently 14 months. Server logs roll over within [ 30 ] days. Enquiries are kept as long as the conversation is live, and business records for as long as tax law requires.
Your choices
You can block the analytics cookies in your browser settings or with any content blocker, and the site will work exactly the same; nothing here depends on them.
Depending on where you live you may have the right to ask what I hold about you, to have it corrected, to have it deleted, or to object to it being processed at all. That includes residents of California under the CCPA and CPRA, and residents of the UK and EU under the UK GDPR and GDPR. Email [ [email protected] ] and I will answer within 30 days. I will not charge you for asking, and I will not treat you differently for having asked.
If you are in the UK or EU, the legal basis for the analytics is legitimate interest in understanding whether the site works; for anything you send me, it is taking steps at your request before entering a contract.
Children
This site is aimed at businesses and is not directed at anyone under 16. I do not knowingly collect information from children.
Changes
If this policy changes materially I will change the date at the top. There is no mailing list to notify, which is rather the point.